.NET Core 3.1 vulnerability

What happened

.NET and Visual Studio Elevation of Privilege Vulnerability

Affected versions

.NET Core 3.1: 3.1 through before 3.1.15-servicing.21214.3 (custom); 5.0.0 through before 5.0.6-servicing.21220.11 (custom); 15.0.0 through before publication (custom); 16.0 through before publication (custom); 16.0.0 through before publication (custom); 8.0 through before publication (custom) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.