title: .NET and Visual Studio Elevation of Privilege Vulnerability
description: .NET and Visual Studio Elevation of Privilege Vulnerability
problem types: Elevation of Privilege
affected:
{
vendor: Microsoft
product: .NET Core 3.1
cpes: cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*
platforms: Unknown
versions:
version: 3.1, lessThan: 3.1.15-servicing.21214.3, versionType: custom, status: affected
}
{
vendor: Microsoft
product: .NET 5.0
cpes: cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
platforms: Unknown
versions:
version: 5.0.0, lessThan: 5.0.6-servicing.21220.11, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
cpes: cpe:2.3:a:microsoft:visual_studio_2019:16.9:*:*:*:*:*:*:*
platforms: Unknown
versions:
version: 15.0.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
cpes: cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
platforms: Unknown
versions:
version: 16.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
cpes: cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
platforms: Unknown
versions:
version: 16.0.0, lessThan: publication, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Visual Studio 2019 for Mac version 8.9
cpes: cpe:2.3:a:microsoft:visual_studio_2019:8.10:*:*:*:*:macos:*:*
platforms: Unknown
versions:
version: 8.0, lessThan: publication, versionType: custom, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: HIGH
baseScore: 7.3
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
]