CVE-2021-31204

HighCVSS 7.3/10Last modified Oct 7, 2026

Description

.NET and Visual Studio Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published
May 11, 2021
Last modified
Oct 7, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-312056.5Windows SMB Client Security Feature Bypass VulnerabilityCVE-2021-312067.6Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-312076.6Microsoft Exchange Server Security Feature Bypass VulnerabilityCVE-2021-312087.8Windows Container Manager Service Elevation of Privilege VulnerabilityCVE-2021-312096.5Microsoft Exchange Server Spoofing VulnerabilityCVE-2021-31218.6An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut CVE-2021-312117.8Visual Studio Code Remote Code Execution VulnerabilityCVE-2021-312137.8Visual Studio Code Remote Containers Extension Remote Code Execution VulnerabilityCVE-2021-312147.8Visual Studio Code Remote Code Execution VulnerabilityCVE-2021-312158.8SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser because use of a PrologSluCVE-2021-312168.1Siren Investigate before 11.1.1 contains a server side request forgery (SSRF) defect in the built-in image proxy route (which is enabled by CVE-2021-312179.1In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM.
CVE-2021-31204: High severity, CVSS 7.3 | Vulnix