CVE-2021-26701CriticalCVSS 8.1
.NET Core Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Is Visual Studio affected by this vulnerability? Visual Studio contains the binaries for .NET, but Visual Studio is not vulnerable to this issue. The update is offered to include the .NET files so any future applications built in Visual Studio which include .NET functionality will be protected from this issue.
🎯 Affected products11
- .NET 5.0
- .NET Core 2.1
- .NET Core 3.1
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
- Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
- Microsoft Visual Studio 2019 version 16.8 (includes 16.0 - 16.7)
- Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
- PowerShell Core 7.0
- PowerShell Core 7.1
- Visual Studio 2019 for Mac
✅ Remediation
KBRelease Notes (Security Update)
🔗 References (10)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26701
- patchhttps://dotnet.microsoft.com/download/dotnet-core/2.1
- patchhttps://dotnet.microsoft.com/download/dotnet-core/3.1
- patchhttps://dotnet.microsoft.com/download/dotnet/5.0
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.4
- patchhttp://aka.ms/vs/15/release/latest
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.7
- patchhttps://visualstudio.microsoft.com/vs/mac/
- patchhttp://aka.ms/vs/16/release/latest
- patchhttps://github.com/PowerShell/PowerShell#get-powershell