CVE-2021-43877: Microsoft ASP.NET Core

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Affected products

• Microsoft ASP.NET Core: version 3.1 only; version 5.0 only; version 6.0 only
• Microsoft Visual Studio 2019: version 16.7 only; version 16.9 only; version 16.11 only
• Microsoft Visual Studio 2022: version 17.0 only

Published 2021-12-15. Last modified 2026-06-17.