---
id: CVE-2021-34532
title: ASP.NET Core and Visual Studio Information Disclosure Vulnerability
summary: ASP.NET Core and Visual Studio Information Disclosure Vulnerability
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C'
cvssSource: cna
vendor: Microsoft
product: ASP.NET Core 2.1
affected:
  - asp.net_core_2.1 >= 2.0 < 2.1.29
  - asp.net_core_3.1 >= 3.0 < 3.1.18
  - asp.net_core_5.0 >= 5.0 < 5.0.9
  - visual_studio_2019_version_16.10_includes_16.0_-_16.9 >= 16.10.0 < 16.10.5
  - visual_studio_2019_version_16.4_includes_16.0_-_16.3 >= 16.0 < 16.4.25
  - visual_studio_2019_version_16.7_includes_16.0_16.6 >= 16.0.0 < 16.7.18
  - visual_studio_2019_version_16.9_includes_16.0_-_16.8 >= 15.0.0 < 16.9.10
  - visual_studio_2019_for_mac_version_8.10 >= 8.1.0 < 8.10.7
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-06-04T13:28:16.969889Z'
published: '2021-08-12'
updated: '2026-11-02'
sourceUpdated: '2026-11-02T18:03:45.467Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2021-34532'
references:
  - url: 'https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34532'
    label: ASP.NET Core and Visual Studio Information Disclosure Vulnerability
tags:
  - cve.org
epss: 0.01219
epssPercentile: 0.68852
ingestedAt: '2026-11-05T19:30:42.763Z'
---

## Overview

ASP.NET Core and Visual Studio Information Disclosure Vulnerability

## Affected

- `asp.net_core_2.1 >= 2.0 < 2.1.29`
- `asp.net_core_3.1 >= 3.0 < 3.1.18`
- `asp.net_core_5.0 >= 5.0 < 5.0.9`
- `visual_studio_2019_version_16.10_includes_16.0_-_16.9 >= 16.10.0 < 16.10.5`
- `visual_studio_2019_version_16.4_includes_16.0_-_16.3 >= 16.0 < 16.4.25`
- `visual_studio_2019_version_16.7_includes_16.0_16.6 >= 16.0.0 < 16.7.18`
- `visual_studio_2019_version_16.9_includes_16.0_-_16.8 >= 15.0.0 < 16.9.10`
- `visual_studio_2019_for_mac_version_8.10 >= 8.1.0 < 8.10.7`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.