CVE-2021-26701high

CVE-2021-26701: falha de alta gravidade em Microsoft Visual Studio 2017 version 15.9…

.NET Core Remote Code Execution Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Microsoft Visual Studio+ Monitorar .NET

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

33Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.1epss 30%
.NET Core Remote Code Execution Vulnerability
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Produtos afetados
Microsoft · Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)Microsoft · Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)Microsoft · Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)Microsoft · Microsoft Visual Studio 2019 version 16.8 (includes 16.0 - 16.7)Microsoft · Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)Microsoft · .NET 5.0Microsoft · .NET Core 2.1Microsoft · .NET Core 3.1Microsoft · PowerShell Core 7.0Microsoft · PowerShell Core 7.1Microsoft · Visual Studio 2019 for Mac
CVEs relacionadas — Microsoft Visual Studio 2017 version 15.9…

No mesmo produto, das mais perigosas para as menos.

CVE-2020-1147HIGHCVE-2020-1147EPSS 95.8%KEVCVE-2021-27068HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 53.6%CVE-2021-36952HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 51.5%CVE-2019-1349—CVE-2019-1349EPSS 34.0%CVE-2019-1350—CVE-2019-1350EPSS 25.7%CVE-2019-1352—CVE-2019-1352EPSS 24.0%