CVE-2021-43877

—

CVSS 3.1

8.8 high

EPSS

<1%p52

Published

Dec 15, 2021 (Dec 15, 2021)

Modified

Jun 17, 2026

Description

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Vendors: microsoft
Products: asp.net core, visual studio 2019, visual studio 2022
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news1 stories

Microsoft December 2021 Patch Tuesday fixes an actively exploited zero

Security AffairsDec 15, 15:08 UTC · Dec 15, 2021Vulnerability in the wildCVE-2021-43890 CVE-2021-43240 CVE-2021-41333+54 CVEs

60