{"affected":[{"platforms":["Unknown"],"product":"Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"16.7.23","status":"affected","version":"16.0.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":"Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"16.9.15","status":"affected","version":"15.0.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":"Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"16.11.8","status":"affected","version":"16.11.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":"Microsoft Visual Studio 2022 version 17.0","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"17.0.3","status":"affected","version":"17.0.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":"ASP.NET Core 3.1","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"3.1.22","status":"affected","version":"3.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":"ASP.NET Core 5.0","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"5.0.13","status":"affected","version":"5.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":"ASP.NET Core 6.0","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"6.0.101","status":"affected","version":"6.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":"Microsoft Visual Studio 2022 version 17.1","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"17.1.4","status":"affected","version":"17.0.0","versionType":"custom"}]}],"cveId":"CVE-2021-43877","cwes":[],"description":"ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability","epss":{"date":"2026-11-02","percentile":0.54383,"score":0.00733},"exploits":[],"kev":null,"metrics":[{"score":8.8,"severity":"high","source":"CNA: microsoft","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"}],"modifiedAt":1793643295026,"publishedAt":1639577731000,"references":[{"source":"CNA: microsoft","tags":["x_refsource_MISC"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43877"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43877"}],"remediation":[],"revision":"191e7c1f7dccc4b43ce9989e7d6dc8727b357441786fe185129a01b20ba7575b","sources":[{"modifiedAt":1793643295026,"name":"CNA: microsoft","retrievedAt":1793646505332,"url":"https://www.cve.org/CVERecord?id=CVE-2021-43877"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793646508022,"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-43877"}],"ssvc":{"assessedAt":1791493304367,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability","updatedAt":1793646508022}