CVE-2021-26423HighCVSS 7.5
.NET Core and Visual Studio Denial of Service Vulnerability
🔗 CVE IDs covered (1)
🎯 Affected products11
- .NET 5.0
- .NET Core 2.1
- .NET Core 3.1
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.10 (includes 16.0 - 16.9)
- Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
- Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
- Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
- PowerShell Core 7.0
- PowerShell Core 7.1
- Visual Studio 2019 for Mac version 8.10
✅ Remediation
KBRelease Notes (Security Update) — fixed build 15.9.38 KBRelease Notes (Security Update) — fixed build 16.4.25 KBRelease Notes (Security Update) — fixed build 16.7.18 KBRelease Notes (Security Update) — fixed build 16.9.10 KBRelease Notes (Security Update) — fixed build 16.10.5 KBRelease Notes (Security Update) — fixed build 8.10.7 KBRelease Notes (Security Update) — fixed build 2.1.30 KBRelease Notes (Security Update) — fixed build 3.1.18 KBRelease Notes (Security Update) — fixed build 5.0.9 KBRelease Notes (Security Update) — fixed build 7.1.4 KBRelease Notes (Security Update) — fixed build 7.0.7
🔗 References (19)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26423
- patchhttp://aka.ms/vs/15/release/latest
- referencehttps://docs.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.4
- referencehttps://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.4
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.7
- referencehttps://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.7
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.9
- referencehttps://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.9
- patchhttp://aka.ms/vs/16/release/latest
- referencehttps://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.10
- patchhttps://visualstudio.microsoft.com/vs/mac/
- referencehttps://docs.microsoft.com/visualstudio/releasenotes/vs2019-mac-relnotes
- patchhttps://dotnet.microsoft.com/download/dotnet-core/2.1
- referencehttps://github.com/dotnet/announcements/issues/194
- patchhttps://dotnet.microsoft.com/download/dotnet-core/3.1
- patchhttps://dotnet.microsoft.com/download/dotnet/5.0
- patchhttps://github.com/PowerShell/PowerShell#get-powershell
- referencehttps://github.com/PowerShell/Announcements/issues/25