CVE-2021-31204High· 7.3▾ Twilight.NET and Visual Studio Elevation of Privilege Vulnerability
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.2 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.4%
.NET and Visual Studio Elevation of Privilege Vulnerability
.net >= 5.0, <= 5.0.5.net_core >= 3.1, <= 3.1.14visual_studio_2019 >= 16.0, < 16.4.22visual_studio_2019 >= 16.5.0, < 16.7.15visual_studio_2019 >= 16.8.0, < 16.9.5visual_studio_2019 = 8.9fedora = 32fedora = 33fedora = 34Upgrade past the affected range:
visual_studio_2019 16.9.5Connected by shared product, vendor, weakness, or advisory.
CVE-2022-21986High· 7.5.NET Denial of Service Vulnerability
CVE-2021-34485Medium· 5.0.NET Core and Visual Studio Information Disclosure Vulnerability
CVE-2021-31957Medium· 5.9ASP.NET Core Denial of Service Vulnerability
CVE-2021-24112High· 8.1.NET Core Remote Code Execution Vulnerability
CVE-2026-58649Medium· 6.5Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-33116High· 7.5Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.