{"id":"CVE-2021-1721","published":"2021-02-25T23:01:26Z","modified":"2026-05-28T19:30:20Z","title":".NET Core and Visual Studio Denial of Service Vulnerability","vendor":"Microsoft","product":"Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)","tier":"tail","description":{"text":".NET Core and Visual Studio Denial of Service Vulnerability","provenance":"source","from":"CVE.org"},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.0334,"percentile":0.8861,"provenance":"source"},"cwes":[],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1721","tags":["x_refsource_MISC"]}],"priority":{"score":22.3,"factors":[{"name":"EPSS percentile","points":17.72},{"name":"CVSS severity","points":4.55}]},"vendorSlug":"microsoft","affectedVersions":[{"vendor":"Microsoft","product":"Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)","versions":[">= 16.0.0, < publication"]},{"vendor":"Microsoft","product":"PowerShell Core 7.1","versions":[">= 7.1.0, < publication"]},{"vendor":"Microsoft","product":"PowerShell Core 7.0","versions":[">= 7.0.0, < publication"]},{"vendor":"Microsoft","product":".NET Core 2.1","versions":[">= 2.1, < publication"]},{"vendor":"Microsoft","product":".NET Core 3.1","versions":[">= 3.1, < publication"]},{"vendor":"Microsoft","product":".NET 5.0","versions":[">= 5.0.0, < publication"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)","versions":[">= 16.0, < publication"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2019 version 16.8","versions":[">= 16.0, < publication"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)","versions":[">= 15.9.0, < publication"]}],"affected":[{"ecosystem":"NuGet","package":"Microsoft.NETCore.App","vulnerableRanges":[">=2.1.0, <2.1.25"],"patched":["2.1.25"],"from":["GHSA-3gp9-h8hw-pxpw"],"provenance":"source"},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Host.linux-arm","vulnerableRanges":[">=3.1.0, <3.1.12"],"patched":["3.1.12"],"from":["GHSA-3gp9-h8hw-pxpw"],"provenance":"source"},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Host.linux-arm64","vulnerableRanges":[">=3.1.0, <3.1.12"],"patched":["3.1.12"],"from":["GHSA-3gp9-h8hw-pxpw"],"provenance":"source"},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Host.linux-musl-arm64","vulnerableRanges":[">=3.1.0, <3.1.12"],"patched":["3.1.12"],"from":["GHSA-3gp9-h8hw-pxpw"],"provenance":"source"},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Host.linux-musl-x64","vulnerableRanges":[">=3.1.0, <3.1.12"],"patched":["3.1.12"],"from":["GHSA-3gp9-h8hw-pxpw"],"provenance":"source"},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Host.linux-x64","vulnerableRanges":[">=3.1.0, <3.1.12"],"patched":["3.1.12"],"from":["GHSA-3gp9-h8hw-pxpw"],"provenance":"source"},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Host.osx-x64","vulnerableRanges":[">=3.1.0, <3.1.12"],"patched":["3.1.12"],"from":["GHSA-3gp9-h8hw-pxpw"],"provenance":"source"},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Host.rhel.6-x64","vulnerableRanges":[">=3.1.0, <3.1.12"],"patched":["3.1.12"],"from":["GHSA-3gp9-h8hw-pxpw"],"provenance":"source"},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Host.win-arm","vulnerableRanges":[">=3.1.0, <3.1.12"],"patched":["3.1.12"],"from":["GHSA-3gp9-h8hw-pxpw"],"provenance":"source"},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Host.win-arm64","vulnerableRanges":[">=3.1.0, <3.1.12"],"patched":["3.1.12"],"from":["GHSA-3gp9-h8hw-pxpw"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2181","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2018-8416","published":"2018-11-14","fixed":"2.1.7","kev":false},{"cve":"CVE-2020-1108","published":"2020-05-21","fixed":"2.1.18","kev":false},{"cve":"CVE-2020-1147","published":"2020-07-14","fixed":"2.1.20","kev":true,"link":{"from":"CVE-2020-1147","to":"CVE-2021-1721","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"NuGet:Microsoft.NETCore.App","fromFixed":"2.1.20","toFixed":"2.1.25","daysApart":226},{"kind":"similar","provenance":"machine","score":0.67,"basis":"same package + description similarity"}]}},{"cve":"CVE-2021-1721","published":"2021-02-25","fixed":"2.1.25","kev":false},{"cve":"CVE-2021-34485","published":"2021-08-12","fixed":"2.1.29","kev":false,"link":{"from":"CVE-2021-1721","to":"CVE-2021-34485","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"NuGet:Microsoft.NETCore.App","fromFixed":"2.1.25","toFixed":"2.1.29","daysApart":168},{"kind":"similar","provenance":"machine","score":0.91,"basis":"same package + description similarity"}]}},{"cve":"CVE-2019-0545","published":"2019-01-08","fixed":"2.2.1","kev":false},{"cve":"CVE-2019-0564","published":"2019-01-08","fixed":"2.2.1","kev":false}],"package":"NuGet:Microsoft.NETCore.App"}}