CVE-2021-26423

HIGH

.NET 5.0 < 5.0.8 and .NET Core 2.1 < 2.1.28 - Denial of Service

Title source: llm
STIX 2.1

Description

.NET Core and Visual Studio Denial of Service Vulnerability

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0337
EPSS Percentile 87.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (29)
microsoft/.net 5.0 - 5.0.8
microsoft/.net_core 2.1 - 2.1.28
microsoft/powershell_core 7.0 - 7.0.7
microsoft/visual_studio_2017 15.0 - 15.9
microsoft/visual_studio_2019 8.10
microsoft/visual_studio_2019 16.0 - 16.10
nuget/Microsoft.NETCore.App.Runtime.linux-arm 3.1.0 - 3.1.18NuGet
nuget/Microsoft.NETCore.App.Runtime.linux-arm64 3.1.0 - 3.1.18NuGet
nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm 5.0.0 - 5.0.9NuGet
nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm64 3.1.0 - 3.1.18NuGet
... and 19 more
Published Aug 12, 2021
Tracked Since Feb 18, 2026