CVE-2021-26423: Microsoft .net

High severity, CVSS 7.5. EPSS: 3.9% chance of exploitation in the next 30 days.

.NET Core and Visual Studio Denial of Service Vulnerability

Affected products

• Microsoft .net: from 5.0, up to and including 5.0.8
• Microsoft .net Core: from 2.1, up to and including 2.1.28; from 3.1, up to and including 3.1.17
• Microsoft PowerShell Core: from 7.0, before 7.0.7 (fixed in 7.0.7); from 7.1, before 7.1.4 (fixed in 7.1.4)
• Microsoft Visual Studio 2017: from 15.0, up to and including 15.9
• Microsoft Visual Studio 2019: from 16.0, up to and including 16.10; version 8.10 only

Published 2021-08-12. Last modified 2026-08-10.