CVE-2021-1721: microsoft microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)

CVSS: 6.5v3.1MediumModified

AliasesRHSA-2021:0470RHSA-2021:0471RHSA-2021:0472+6 more

Published 25-02-2021Last modified 28-05-2026

Vulnerability summary

CVE-2021-1721 is a medium (CVSS 6.5) vulnerability in microsoft microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8). EPSS estimates a 3.34% chance of exploitation in the next 30 days, higher than 88.5% of scored vulnerabilities.

Overall risk

27/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.5/10

010

Medium · v3.1 (CVE.org)

EPSS score

3.34%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

25-02-2021
PublishedVulnerability first disclosed.
28-05-2026
Last modifiedVulnerability information updated.

Description

.NET Core and Visual Studio Denial of Service Vulnerability

CVSS metrics

5 scores · 4 sources · 2 versions

v3.16.5v2.04.3

EPSS trend

Probability

3.34%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

0.00 pp

From 3.34% on 19-09-2026

19-09-202619-10-2026

EPSS score

3.34%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat75 products

aspnetcore-runtime-3.1< 0:3.1.12-1.el8_3
aspnetcore-runtime-5.0< 0:5.0.3-1.el8_3
aspnetcore-targeting-pack-3.1< 0:3.1.12-1.el8_3
aspnetcore-targeting-pack-5.0< 0:5.0.3-1.el8_3
dotnet< 0:2.1.521-1.el8_3 | < 0:5.0.103-1.el8_3

dotnet-apphost-pack-3.1< 0:3.1.12-1.el8_3
dotnet-apphost-pack-3.1-debuginfo< 0:3.1.12-1.el8_3
dotnet-apphost-pack-5.0< 0:5.0.3-1.el8_3
dotnet-apphost-pack-5.0-debuginfo< 0:5.0.3-1.el8_3
dotnet-debuginfo< 0:2.1.521-1.el8_3
dotnet-debugsource< 0:2.1.521-1.el8_3
dotnet-host< 0:5.0.3-1.el8_3
dotnet-host-debuginfo< 0:5.0.3-1.el8_3
dotnet-host-fxr-2.1< 0:2.1.25-1.el8_3
dotnet-host-fxr-2.1-debuginfo< 0:2.1.25-1.el8_3
dotnet-hostfxr-3.1< 0:3.1.12-1.el8_3
dotnet-hostfxr-3.1-debuginfo< 0:3.1.12-1.el8_3
dotnet-hostfxr-5.0< 0:5.0.3-1.el8_3
dotnet-hostfxr-5.0-debuginfo< 0:5.0.3-1.el8_3
dotnet-runtime-2.1< 0:2.1.25-1.el8_3
dotnet-runtime-2.1-debuginfo< 0:2.1.25-1.el8_3
dotnet-runtime-3.1< 0:3.1.12-1.el8_3
dotnet-runtime-3.1-debuginfo< 0:3.1.12-1.el8_3
dotnet-runtime-5.0< 0:5.0.3-1.el8_3
dotnet-runtime-5.0-debuginfo< 0:5.0.3-1.el8_3
dotnet-sdk-2.1< 0:2.1.521-1.el8_3
dotnet-sdk-2.1.5xx< 0:2.1.521-1.el8_3
dotnet-sdk-2.1.5xx-debuginfo< 0:2.1.521-1.el8_3
dotnet-sdk-3.1< 0:3.1.112-1.el8_3
dotnet-sdk-3.1-debuginfo< 0:3.1.112-1.el8_3
dotnet-sdk-5.0< 0:5.0.103-1.el8_3
dotnet-sdk-5.0-debuginfo< 0:5.0.103-1.el8_3
dotnet-targeting-pack-3.1< 0:3.1.12-1.el8_3
dotnet-targeting-pack-5.0< 0:5.0.3-1.el8_3
dotnet-templates-3.1< 0:3.1.112-1.el8_3
dotnet-templates-5.0< 0:5.0.103-1.el8_3
dotnet3.1< 0:3.1.112-1.el8_3
dotnet3.1-debuginfo< 0:3.1.112-1.el8_3
dotnet3.1-debugsource< 0:3.1.112-1.el8_3
dotnet5.0< 0:5.0.103-1.el8_3
dotnet5.0-debuginfo< 0:5.0.103-1.el8_3
dotnet5.0-debugsource< 0:5.0.103-1.el8_3
netstandard-targeting-pack-2.1< 0:5.0.103-1.el8_3
rh-dotnet21< 0:2.1-24.el7_9
rh-dotnet21-dotnet< 0:2.1.521-1.el7_9
rh-dotnet21-dotnet-debuginfo< 0:2.1.521-1.el7_9
rh-dotnet21-dotnet-host< 0:2.1.25-1.el7_9
rh-dotnet21-dotnet-runtime-2.1< 0:2.1.25-1.el7_9
rh-dotnet21-dotnet-sdk-2.1< 0:2.1.521-1.el7_9
rh-dotnet21-dotnet-sdk-2.1.5xx< 0:2.1.521-1.el7_9
rh-dotnet21-runtime< 0:2.1-24.el7_9
rh-dotnet31-aspnetcore-runtime-3.1< 0:3.1.12-1.el7_9
rh-dotnet31-aspnetcore-targeting-pack-3.1< 0:3.1.12-1.el7_9
rh-dotnet31-dotnet< 0:3.1.112-1.el7_9
rh-dotnet31-dotnet-apphost-pack-3.1< 0:3.1.12-1.el7_9
rh-dotnet31-dotnet-debuginfo< 0:3.1.112-1.el7_9
rh-dotnet31-dotnet-host< 0:3.1.12-1.el7_9
rh-dotnet31-dotnet-hostfxr-3.1< 0:3.1.12-1.el7_9
rh-dotnet31-dotnet-runtime-3.1< 0:3.1.12-1.el7_9
rh-dotnet31-dotnet-sdk-3.1< 0:3.1.112-1.el7_9
rh-dotnet31-dotnet-targeting-pack-3.1< 0:3.1.12-1.el7_9
rh-dotnet31-dotnet-templates-3.1< 0:3.1.112-1.el7_9
rh-dotnet31-netstandard-targeting-pack-2.1< 0:3.1.112-1.el7_9
rh-dotnet50-aspnetcore-runtime-5.0< 0:5.0.3-1.el7_9
rh-dotnet50-aspnetcore-targeting-pack-5.0< 0:5.0.3-1.el7_9
rh-dotnet50-dotnet< 0:5.0.103-1.el7_9
rh-dotnet50-dotnet-apphost-pack-5.0< 0:5.0.3-1.el7_9
rh-dotnet50-dotnet-debuginfo< 0:5.0.103-1.el7_9
rh-dotnet50-dotnet-host< 0:5.0.3-1.el7_9
rh-dotnet50-dotnet-hostfxr-5.0< 0:5.0.3-1.el7_9
rh-dotnet50-dotnet-runtime-5.0< 0:5.0.3-1.el7_9
rh-dotnet50-dotnet-sdk-5.0< 0:5.0.103-1.el7_9
rh-dotnet50-dotnet-targeting-pack-5.0< 0:5.0.3-1.el7_9
rh-dotnet50-dotnet-templates-5.0< 0:5.0.103-1.el7_9
rh-dotnet50-netstandard-targeting-pack-2.1< 0:5.0.103-1.el7_9

Show all 75

NuGet45 products

Microsoft.NETCore.App≥ 2.1.0, < 2.1.25
Microsoft.NETCore.App.Host.linux-arm≥ 3.1.0, < 3.1.12
Microsoft.NETCore.App.Host.linux-arm64≥ 3.1.0, < 3.1.12
Microsoft.NETCore.App.Host.linux-musl-arm64≥ 3.1.0, < 3.1.12
Microsoft.NETCore.App.Host.linux-musl-x64≥ 3.1.0, < 3.1.12

Microsoft.NETCore.App.Host.linux-x64≥ 3.1.0, < 3.1.12
Microsoft.NETCore.App.Host.osx-x64≥ 3.1.0, < 3.1.12
Microsoft.NETCore.App.Host.rhel.6-x64≥ 3.1.0, < 3.1.12
Microsoft.NETCore.App.Host.win-arm≥ 3.1.0, < 3.1.12
Microsoft.NETCore.App.Host.win-arm64≥ 3.1.0, < 3.1.12
Microsoft.NETCore.App.Host.win-x64≥ 3.1.0, < 3.1.12
Microsoft.NETCore.App.Host.win-x86≥ 3.1.0, < 3.1.12
Microsoft.NETCore.App.Runtime.android-arm≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.android-arm64≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.android-x64≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.android-x86≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.browser-wasm≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.ios-arm≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.ios-x64≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.ios-x86≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.linux-arm≥ 3.1.0, < 3.1.12 | ≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.linux-arm64≥ 3.1.0, < 3.1.12 | ≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm64≥ 3.1.0, < 3.1.12 | ≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.linux-musl-x64≥ 3.1.0, < 3.1.12 | ≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.linux-x64≥ 3.1.0, < 3.1.12 | ≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-arm≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-arm64≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-x64≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.Mono.osx-x64≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.osx-x64≥ 3.1.0, < 3.1.12 | ≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.rhel.6-x64≥ 3.1.0, < 3.1.12
Microsoft.NETCore.App.Runtime.tvos-arm64≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.tvos-x64≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.win-arm≥ 3.1.0, < 3.1.12 | ≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.win-arm64≥ 3.1.0, < 3.1.12 | ≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.win-x64≥ 3.1.0, < 3.1.12 | ≥ 5.0.0, < 5.0.3
Microsoft.NETCore.App.Runtime.win-x86≥ 3.1.0, < 3.1.12 | ≥ 5.0.0, < 5.0.3

Show all 45

Microsoft14 products

microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)≥ 15.9.0, < publication
microsoft visual studio 2019 version 16.4 (includes 16.0 - 16.3)≥ 16.0, < publication
microsoft visual studio 2019 version 16.7 (includes 16.0 – 16.6)≥ 16.0.0, < publication
microsoft visual studio 2019 version 16.8≥ 16.0, < publication
.net≥ 5.0, ≤ 5.0.2

Show all 14

3 vendors · 134 products

References

21 links

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1721X Refsource MISCWEBPatchVendor Advisory
access.redhat.com/errata/RHSA-2021:0470Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1926918REPORT
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0470.jsonAdvisory
access.redhat.com/security/cve/CVE-2021-1721REPORT
www.cve.org/CVERecord?id=CVE-2021-1721Advisory
nvd.nist.gov/vuln/detail/CVE-2021-1721Advisory
github.com/dotnet/announcements/issues/175ARTICLEWEB
msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1721ARTICLE

Show all 21 references

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities