CVE-2021-34485

MediumCVSS 5.0/10Last modified Oct 7, 2026

Description

.NET Core and Visual Studio Information Disclosure Vulnerability

Metrics

CVSS 3.1 5.0/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
Microsoft.NET 5.0>= 5.0.0, < 5.0.9
Microsoft.NET Core 2.1>= 2.1, < 2.1.30
Microsoft.NET Core 3.1>= 3.1, < 3.1.18
MicrosoftMicrosoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)>= 15.9.0, < 15.9.38
MicrosoftMicrosoft Visual Studio 2019 version 16.10 (includes 16.0 - 16.9)>= 16.10.0, < 16.10.5
MicrosoftMicrosoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)>= 16.0, < 16.4.25
MicrosoftMicrosoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)>= 16.0.0, < 16.7.18
MicrosoftMicrosoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)>= 15.0.0, < 16.9.10
MicrosoftPowerShell 7.0>= 7.0.0, < 7.0.7
MicrosoftPowerShell 7.1>= 7.1.0, < 7.1.4

References

Timeline

Published
Aug 12, 2021
Last modified
Oct 7, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-344867.8Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-344877.0Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-344887.8Windows Console Driver Elevation of Privilege VulnerabilityCVE-2021-344897.8DirectWrite Remote Code Execution VulnerabilityCVE-2021-34495.9An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClCVE-2021-344907.5Windows TCP/IP Driver Denial of Service VulnerabilityCVE-2021-344915.5Win32k Information Disclosure VulnerabilityCVE-2021-344928.1Windows Certificate Spoofing VulnerabilityCVE-2021-344936.7Windows Partition Management Driver Elevation of Privilege VulnerabilityCVE-2021-344948.8Windows DNS Server Remote Code Execution VulnerabilityCVE-2021-344965.5Windows GDI Information Disclosure VulnerabilityCVE-2021-344976.8Windows MSHTML Platform Remote Code Execution Vulnerability