CVE-2021-24112High· 8.1▾ Twilight.NET Core Remote Code Execution Vulnerability
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 44.6 · likelihood 0.7 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
3.3%
3.3% → 3.5%
.NET Core Remote Code Execution Vulnerability
.net >= 5.0, <= 5.0.2.net_core >= 2.1, <= 2.1.24.net_core >= 3.1, <= 3.1.11mono >= 6.12.0, < 6.12.0.122visual_studio_2019Upgrade past the affected range:
mono 6.12.0.122Connected by shared product, vendor, weakness, or advisory.
CVE-2022-21986High· 7.5.NET Denial of Service Vulnerability
CVE-2021-34485Medium· 5.0.NET Core and Visual Studio Information Disclosure Vulnerability
CVE-2021-31204High· 7.3.NET and Visual Studio Elevation of Privilege Vulnerability
CVE-2021-31957Medium· 5.9ASP.NET Core Denial of Service Vulnerability
CVE-2026-58649Medium· 6.5Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-33116High· 7.5Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.