---
id: CVE-2021-31204
title: .NET and Visual Studio Elevation of Privilege Vulnerability
summary: .NET and Visual Studio Elevation of Privilege Vulnerability
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H'
cwe:
  - CWE-269
vendor: microsoft
product: .net
affected:
  - '.net >= 5.0, <= 5.0.5'
  - '.net_core >= 3.1, <= 3.1.14'
  - 'visual_studio_2019 >= 16.0, < 16.4.22'
  - 'visual_studio_2019 >= 16.5.0, < 16.7.15'
  - 'visual_studio_2019 >= 16.8.0, < 16.9.5'
  - visual_studio_2019 = 8.9
  - fedora = 32
  - fedora = 33
  - fedora = 34
patched:
  - visual_studio_2019 16.9.5
published: '2021-05-11'
updated: '2026-10-07'
sourceUpdated: '2026-10-07T17:16:42.367'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2021-31204'
references:
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F3VM3RMPE7PNNLLI3BPCSAXITQZCFCA/
    label: secure@microsoft.com
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M7KL3KTHJVQNRA3CWFUTESQJARQEHSZ/
    label: secure@microsoft.com
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVMWZPF4FR6JPFSNAIDIUDULHZJBVCW6/
    label: secure@microsoft.com
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFXJPQUYUITJMV75YN3XIGE3KKN5GOCU/
    label: secure@microsoft.com
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UV4ITB3SUDGR23G7XALUVKFJMZERFUKF/
    label: secure@microsoft.com
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWF25Z3CZ6LYCOHZ7FPSFAQ426JUBUZ4/
    label: secure@microsoft.com
  - url: >-
      https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31204
    label: secure@microsoft.com
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F3VM3RMPE7PNNLLI3BPCSAXITQZCFCA/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M7KL3KTHJVQNRA3CWFUTESQJARQEHSZ/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVMWZPF4FR6JPFSNAIDIUDULHZJBVCW6/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFXJPQUYUITJMV75YN3XIGE3KKN5GOCU/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UV4ITB3SUDGR23G7XALUVKFJMZERFUKF/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWF25Z3CZ6LYCOHZ7FPSFAQ426JUBUZ4/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31204
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2025-06-04T18:48:32.651672Z'
epss: 0.01365
epssPercentile: 0.70967
ingestedAt: '2026-10-07T16:38:22.257Z'
---

## Overview

.NET and Visual Studio Elevation of Privilege Vulnerability

## Affected

- `.net >= 5.0, <= 5.0.5`
- `.net_core >= 3.1, <= 3.1.14`
- `visual_studio_2019 >= 16.0, < 16.4.22`
- `visual_studio_2019 >= 16.5.0, < 16.7.15`
- `visual_studio_2019 >= 16.8.0, < 16.9.5`
- `visual_studio_2019 = 8.9`
- `fedora = 32`
- `fedora = 33`
- `fedora = 34`

## Remediation

Upgrade past the affected range:

- `visual_studio_2019 16.9.5`