CVE-2021-26423

Published: Aug 12, 2021Modified: Aug 10, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD (Secondary)

Description

.NET Core and Visual Studio Denial of Service Vulnerability

Affected (8)

Products: Microsoft: .net, .net Core, Powershell Core, Visual Studio 2017, Visual Studio 2019

5 products

Powershell Core

Visual Studio 2017

Visual Studio 2019

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Microsoft .net	5.0 ≤ version ≤ 5.0.8
Microsoft .net Core	2.1 ≤ version ≤ 2.1.28
Microsoft .net Core	3.1 ≤ version ≤ 3.1.17
Microsoft Powershell Core	7.0 ≤ version < 7.0.7
Microsoft Powershell Core	7.1 ≤ version < 7.1.4
Microsoft Visual Studio 2017	15.0 ≤ version ≤ 15.9
Microsoft Visual Studio 2019	16.0 ≤ version ≤ 16.10
Microsoft Visual Studio 2019	Version 8.10

References (2)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26423

Source: secure@microsoft.com

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26423

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.