What is CVE-2021-31204?

CVE-2021-31204 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. .NET and Visual Studio Elevation of Privilege Vulnerability

Which CVE IDs does CVE-2021-31204 cover?

CVE-2021-31204 covers the following CVE IDs: CVE-2021-31204. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-31204?

CVE-2021-31204 has a CVSS v3 base score of 7.3, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-31204?

CVE-2021-31204 affects 6 products, including: .NET 5.0; .NET Core 3.1; Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3); Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6); Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8); and others — see the full list on the advisory page.

CVE-2021-31204HighCVSS 7.3

.NET and Visual Studio Elevation of Privilege Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

May 11, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-31204 →

🎯 Affected products6

.NET 5.0
.NET Core 3.1
Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
Visual Studio 2019 for Mac version 8.9

✅ Remediation

KBRelease Notes (Security Update) — fixed build 3.1.15-servicing.21214.3 KBRelease Notes (Security Update) — fixed build 5.0.6-servicing.21220.11 KBRelease Notes (Security Update)

🔗 References (7)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31204
patchhttps://dotnet.microsoft.com/download/dotnet-core/3.1
patchhttps://dotnet.microsoft.com/download/dotnet/5.0
patchhttp://aka.ms/vs/16/release/latest
patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.4
patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.7
patchhttps://visualstudio.microsoft.com/downloads/