{"id":"CVE-2021-31204","title":".NET and Visual Studio Elevation of Privilege Vulnerability","summary":".NET and Visual Studio Elevation of Privilege Vulnerability","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-269"],"vendor":"microsoft","product":".net","affected":[".net >= 5.0, <= 5.0.5",".net_core >= 3.1, <= 3.1.14","visual_studio_2019 >= 16.0, < 16.4.22","visual_studio_2019 >= 16.5.0, < 16.7.15","visual_studio_2019 >= 16.8.0, < 16.9.5","visual_studio_2019 = 8.9","fedora = 32","fedora = 33","fedora = 34"],"patched":["visual_studio_2019 16.9.5"],"published":"2021-05-11","updated":"2026-10-07","sourceUpdated":"2026-10-07T17:16:42.367","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2021-31204","references":[{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F3VM3RMPE7PNNLLI3BPCSAXITQZCFCA/","label":"secure@microsoft.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M7KL3KTHJVQNRA3CWFUTESQJARQEHSZ/","label":"secure@microsoft.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVMWZPF4FR6JPFSNAIDIUDULHZJBVCW6/","label":"secure@microsoft.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFXJPQUYUITJMV75YN3XIGE3KKN5GOCU/","label":"secure@microsoft.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UV4ITB3SUDGR23G7XALUVKFJMZERFUKF/","label":"secure@microsoft.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWF25Z3CZ6LYCOHZ7FPSFAQ426JUBUZ4/","label":"secure@microsoft.com"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31204","label":"secure@microsoft.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F3VM3RMPE7PNNLLI3BPCSAXITQZCFCA/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M7KL3KTHJVQNRA3CWFUTESQJARQEHSZ/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVMWZPF4FR6JPFSNAIDIUDULHZJBVCW6/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFXJPQUYUITJMV75YN3XIGE3KKN5GOCU/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UV4ITB3SUDGR23G7XALUVKFJMZERFUKF/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWF25Z3CZ6LYCOHZ7FPSFAQ426JUBUZ4/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31204","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2025-06-04T18:48:32.651672Z"},"epss":0.01365,"epssPercentile":0.70967,"ingestedAt":"2026-10-07T16:38:22.257Z","slug":"CVE-2021-31204","body":"## Overview\n\n.NET and Visual Studio Elevation of Privilege Vulnerability\n\n## Affected\n\n- `.net >= 5.0, <= 5.0.5`\n- `.net_core >= 3.1, <= 3.1.14`\n- `visual_studio_2019 >= 16.0, < 16.4.22`\n- `visual_studio_2019 >= 16.5.0, < 16.7.15`\n- `visual_studio_2019 >= 16.8.0, < 16.9.5`\n- `visual_studio_2019 = 8.9`\n- `fedora = 32`\n- `fedora = 33`\n- `fedora = 34`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `visual_studio_2019 16.9.5`","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0.3,"exploitation":0,"ransomware":0},"changes":[]}