CVE-2021-34485

.NET Core and Visual Studio Information Disclosure Vulnerability

5.0 MediumFix available

.NET Core and Visual Studio Information Disclosure Vulnerability

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

2.07%Up 1.7 points since Aug 13, 2021

What each source reports

CVE List Score used 5.0

.NET Core and Visual Studio Information Disclosure Vulnerability

.NET Core and Visual Studio Information Disclosure Vulnerability

Record: CVE-2021-34485
CVSS 3.1: 5.0 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
CVSS 3.1: 5.0 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

EUVDEUVD-2022-7165 5.0

.NET Core and Visual Studio Information Disclosure Vulnerability

Record: EUVD-2022-7165
CVSS 3.1: 5.0 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Updated: 2026-11-02

GitHub AdvisoriesGHSA-vgwq-hfqc-58wv 5.5

.NET Core Information Disclosure Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0, .NET Core 3.1 and .NET Core 2.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

An information disclosure vulnerability exists in .NET 5.0, .NET Core 3.1 and .NET Core 2.1 when dumps created by the tool to collect crash dumps and dumps on demand are created with global read permissions on Linux and macOS.

Patches

If you're using .NET 5.0, you should download and install Runtime 5.0.9 or SDK 5.0.206 (for Visual Studio 2019 v16.8) or SDK 5.0.303 (for Visual Studio 2019 V16.10) from https://dotnet.microsoft.com/download/dotnet-core/5.0.
If you're using .NET Core 3.1, you should download and install Runtime 3.1.18 or SDK 3.1.118 (for Visual Studio 2019 v16.4) or 3.1.412 (for Visual Studio 2019 v16.7 or later) from https://dotnet.microsoft.com/download/dotnet-core/3.1.
If you're using .NET Core 2.1, you should download and install Runtime 2.1.29 or SDK 2.1.525 (for Visual Studio 2019 v15.9) or 2.1.817 from https://dotnet.microsoft.com/download/dotnet-core/2.1.

Other Details

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/196
An Issue for this can be found at https://github.com/dotnet/runtime/issues/57174
MSRC details for this can be found at https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-34485

Record: GHSA-vgwq-hfqc-58wv
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

NVD 5.0

.NET Core and Visual Studio Information Disclosure Vulnerability

Record: CVE-2021-34485
CVSS 3.1: 5.0 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

OSV 5.0

.NET Core and Visual Studio Information Disclosure Vulnerability

Record: CVE-2021-34485
CVSS 3.1: 5.0 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVGHSA-vgwq-hfqc-58wv 5.5

.NET Core Information Disclosure Vulnerability

Patches

If you're using .NET 5.0, you should download and install Runtime 5.0.9 or SDK 5.0.206 (for Visual Studio 2019 v16.8) or SDK 5.0.303 (for Visual Studio 2019 V16.10) from https://dotnet.microsoft.com/download/dotnet-core/5.0.
If you're using .NET Core 3.1, you should download and install Runtime 3.1.18 or SDK 3.1.118 (for Visual Studio 2019 v16.4) or 3.1.412 (for Visual Studio 2019 v16.7 or later) from https://dotnet.microsoft.com/download/dotnet-core/3.1.
If you're using .NET Core 2.1, you should download and install Runtime 2.1.29 or SDK 2.1.525 (for Visual Studio 2019 v15.9) or 2.1.817 from https://dotnet.microsoft.com/download/dotnet-core/2.1.

Other Details

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/196
An Issue for this can be found at https://github.com/dotnet/runtime/issues/57174
MSRC details for this can be found at https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-34485

Record: GHSA-vgwq-hfqc-58wv
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

Show 8 moreShow less

OSVRHSA-2021:3142 7.5

Red Hat Security Advisory: .NET Core 3.1 security and bugfix update

Record: RHSA-2021:3142
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2021:3143 7.5

Red Hat Security Advisory: .NET Core 3.1 on RHEL 7 security and bugfix update

Record: RHSA-2021:3143
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2021:3144 5.5

Red Hat Security Advisory: .NET Core 2.1 on Red Hat Enterprise Linux security and bugfix update

Record: RHSA-2021:3144
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2021:3145 5.5

Red Hat Security Advisory: .NET Core 2.1 security and bugfix update

Record: RHSA-2021:3145
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2021:3147 7.5

Red Hat Security Advisory: .NET 5.0 on RHEL 7 security and bugfix update

Record: RHSA-2021:3147
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2021:3148 7.5

Red Hat Security Advisory: .NET 5.0 security and bugfix update

Record: RHSA-2021:3148
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVBIT-dotnet-2021-34485 No score

.NET Core and Visual Studio Information Disclosure Vulnerability

.NET Core and Visual Studio Information Disclosure Vulnerability

Record: BIT-dotnet-2021-34485
Updated: 2026-11-02

OSVBIT-dotnet-sdk-2021-34485 No score

.NET Core and Visual Studio Information Disclosure Vulnerability

.NET Core and Visual Studio Information Disclosure Vulnerability

Record: BIT-dotnet-sdk-2021-34485
Updated: 2026-11-02

Affected products

Show 3 moreShow less

Affected packages

Affected packages
Package	Affected	Fixed
`Microsoft.NETCore.App` NuGet	2.1.0 up to 2.1.29	2.1.29
`Microsoft.NETCore.App.Runtime.linux-arm` NuGet	3.1.0 up to 3.1.18	3.1.18
`Microsoft.NETCore.App.Runtime.linux-arm64` NuGet	3.1.0 up to 3.1.18	3.1.18
`Microsoft.NETCore.App.Runtime.linux-musl-arm64` NuGet	3.1.0 up to 3.1.18	3.1.18
`Microsoft.NETCore.App.Runtime.linux-musl-x64` NuGet	3.1.0 up to 3.1.18	3.1.18
`Microsoft.NETCore.App.Runtime.linux-x64` NuGet	3.1.0 up to 3.1.18	3.1.18
`Microsoft.NETCore.App.Runtime.osx-x64` NuGet	3.1.0 up to 3.1.18	3.1.18
`Microsoft.NETCore.App.Runtime.rhel.6-x64` NuGet	3.1.0 up to 3.1.18	3.1.18
`Microsoft.NETCore.App.Runtime.win-arm` NuGet	3.1.0 up to 3.1.18	3.1.18
`Microsoft.NETCore.App.Runtime.win-arm64` NuGet	3.1.0 up to 3.1.18	3.1.18

Show 136 moreShow less

Affected packages
Package	Affected	Fixed
`Microsoft.NETCore.App.Runtime.win-x64` NuGet	3.1.0 up to 3.1.18	3.1.18
`Microsoft.NETCore.App.Runtime.win-x86` NuGet	3.1.0 up to 3.1.18	3.1.18
`Microsoft.NETCore.App.Runtime.linux-arm` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.linux-arm64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.linux-musl-arm` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.linux-musl-arm64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.linux-musl-x64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.linux-x64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.linux-arm` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.linux-arm64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.linux-x64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.osx-x64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.osx-x64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.win-arm` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.win-arm64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.win-x64` NuGet	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App.Runtime.win-x86` NuGet	5.0.0 up to 5.0.9	5.0.9
`dotnet` Bitnami	5.0.0 up to 5.0.9	5.0.9
`dotnet-sdk` Bitnami	5.0.0 up to 5.0.9	5.0.9
`Microsoft.NETCore.App` NuGet	2.1.0 up to 2.1.29, plus listed versions 2.1.12.1.102.1.112.1.122.1.13 Show 23 moreShow less 2.1.142.1.152.1.162.1.172.1.182.1.192.1.22.1.202.1.212.1.222.1.232.1.242.1.252.1.262.1.272.1.282.1.32.1.42.1.52.1.62.1.72.1.82.1.9	2.1.29
`Microsoft.NETCore.App.Runtime.linux-arm` NuGet	3.1.0 up to 3.1.18, plus listed versions 3.1.13.1.103.1.113.1.123.1.13 Show 12 moreShow less 3.1.143.1.153.1.163.1.173.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.18
`Microsoft.NETCore.App.Runtime.linux-arm64` NuGet	3.1.0 up to 3.1.18, plus listed versions 3.1.13.1.103.1.113.1.123.1.13 Show 12 moreShow less 3.1.143.1.153.1.163.1.173.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.18
`Microsoft.NETCore.App.Runtime.linux-musl-arm64` NuGet	3.1.0 up to 3.1.18, plus listed versions 3.1.13.1.103.1.113.1.123.1.13 Show 12 moreShow less 3.1.143.1.153.1.163.1.173.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.18
`Microsoft.NETCore.App.Runtime.linux-musl-x64` NuGet	3.1.0 up to 3.1.18, plus listed versions 3.1.13.1.103.1.113.1.123.1.13 Show 12 moreShow less 3.1.143.1.153.1.163.1.173.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.18
`Microsoft.NETCore.App.Runtime.linux-x64` NuGet	3.1.0 up to 3.1.18, plus listed versions 3.1.13.1.103.1.113.1.123.1.13 Show 12 moreShow less 3.1.143.1.153.1.163.1.173.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.18
`Microsoft.NETCore.App.Runtime.osx-x64` NuGet	3.1.0 up to 3.1.18, plus listed versions 3.1.13.1.103.1.113.1.123.1.13 Show 12 moreShow less 3.1.143.1.153.1.163.1.173.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.18
`Microsoft.NETCore.App.Runtime.rhel.6-x64` NuGet	3.1.0 up to 3.1.18, plus listed versions 3.1.13.1.103.1.113.1.123.1.13 Show 12 moreShow less 3.1.143.1.153.1.163.1.173.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.18
`Microsoft.NETCore.App.Runtime.win-arm` NuGet	3.1.0 up to 3.1.18, plus listed versions 3.1.13.1.103.1.113.1.123.1.13 Show 12 moreShow less 3.1.143.1.153.1.163.1.173.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.18
`Microsoft.NETCore.App.Runtime.win-arm64` NuGet	3.1.0 up to 3.1.18, plus listed versions 3.1.13.1.103.1.113.1.123.1.13 Show 12 moreShow less 3.1.143.1.153.1.163.1.173.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.18
`Microsoft.NETCore.App.Runtime.win-x64` NuGet	3.1.0 up to 3.1.18, plus listed versions 3.1.13.1.103.1.113.1.123.1.13 Show 12 moreShow less 3.1.143.1.153.1.163.1.173.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.18
`Microsoft.NETCore.App.Runtime.win-x86` NuGet	3.1.0 up to 3.1.18, plus listed versions 3.1.13.1.103.1.113.1.123.1.13 Show 12 moreShow less 3.1.143.1.153.1.163.1.173.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.9	3.1.18
`Microsoft.NETCore.App.Runtime.linux-arm` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.linux-arm64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.linux-musl-arm` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.linux-musl-arm64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.linux-musl-x64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.linux-x64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.linux-arm` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.linux-arm64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.linux-x64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.Mono.osx-x64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.osx-x64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.win-arm` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.win-arm64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.win-x64` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`Microsoft.NETCore.App.Runtime.win-x86` NuGet	5.0.0 up to 5.0.9, plus listed versions 5.0.15.0.25.0.35.0.45.0.55.0.65.0.75.0.8	5.0.9
`aspnetcore-runtime-3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.18-1.el8_4	0:3.1.18-1.el8_4
`aspnetcore-targeting-pack-3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.18-1.el8_4	0:3.1.18-1.el8_4
`dotnet-apphost-pack-3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.18-1.el8_4	0:3.1.18-1.el8_4
`dotnet-apphost-pack-3.1-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.18-1.el8_4	0:3.1.18-1.el8_4
`dotnet-hostfxr-3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.18-1.el8_4	0:3.1.18-1.el8_4
`dotnet-hostfxr-3.1-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.18-1.el8_4	0:3.1.18-1.el8_4
`dotnet-runtime-3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.18-1.el8_4	0:3.1.18-1.el8_4
`dotnet-runtime-3.1-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.18-1.el8_4	0:3.1.18-1.el8_4
`dotnet-sdk-3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.118-1.el8_4	0:3.1.118-1.el8_4
`dotnet-sdk-3.1-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.118-1.el8_4	0:3.1.118-1.el8_4
`dotnet-targeting-pack-3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.18-1.el8_4	0:3.1.18-1.el8_4
`dotnet-templates-3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.118-1.el8_4	0:3.1.118-1.el8_4
`dotnet3.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.118-1.el8_4	0:3.1.118-1.el8_4
`dotnet3.1-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.118-1.el8_4	0:3.1.118-1.el8_4
`dotnet3.1-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:3.1.118-1.el8_4	0:3.1.118-1.el8_4
`rh-dotnet31-aspnetcore-runtime-3.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.18-1.el7_9	0:3.1.18-1.el7_9
`rh-dotnet31-aspnetcore-targeting-pack-3.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.18-1.el7_9	0:3.1.18-1.el7_9
`rh-dotnet31-dotnet` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.118-1.el7_9	0:3.1.118-1.el7_9
`rh-dotnet31-dotnet-apphost-pack-3.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.18-1.el7_9	0:3.1.18-1.el7_9
`rh-dotnet31-dotnet-debuginfo` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.118-1.el7_9	0:3.1.118-1.el7_9
`rh-dotnet31-dotnet-host` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.18-1.el7_9	0:3.1.18-1.el7_9
`rh-dotnet31-dotnet-hostfxr-3.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.18-1.el7_9	0:3.1.18-1.el7_9
`rh-dotnet31-dotnet-runtime-3.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.18-1.el7_9	0:3.1.18-1.el7_9
`rh-dotnet31-dotnet-sdk-3.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.118-1.el7_9	0:3.1.118-1.el7_9
`rh-dotnet31-dotnet-targeting-pack-3.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.18-1.el7_9	0:3.1.18-1.el7_9
`rh-dotnet31-dotnet-templates-3.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.118-1.el7_9	0:3.1.118-1.el7_9
`rh-dotnet31-netstandard-targeting-pack-2.1` Red Hat:rhel_dotnet:3.1::el7 From an advisory covering 3 CVEs	before 0:3.1.118-1.el7_9	0:3.1.118-1.el7_9
`rh-dotnet21` Red Hat:rhel_dotnet:2.1::el7	before 0:2.1-28.el7_9	0:2.1-28.el7_9
`rh-dotnet21-dotnet` Red Hat:rhel_dotnet:2.1::el7	before 0:2.1.525-1.el7_9	0:2.1.525-1.el7_9
`rh-dotnet21-dotnet-debuginfo` Red Hat:rhel_dotnet:2.1::el7	before 0:2.1.525-1.el7_9	0:2.1.525-1.el7_9
`rh-dotnet21-dotnet-host` Red Hat:rhel_dotnet:2.1::el7	before 0:2.1.29-1.el7_9	0:2.1.29-1.el7_9
`rh-dotnet21-dotnet-runtime-2.1` Red Hat:rhel_dotnet:2.1::el7	before 0:2.1.29-1.el7_9	0:2.1.29-1.el7_9
`rh-dotnet21-dotnet-sdk-2.1` Red Hat:rhel_dotnet:2.1::el7	before 0:2.1.525-1.el7_9	0:2.1.525-1.el7_9
`rh-dotnet21-dotnet-sdk-2.1.5xx` Red Hat:rhel_dotnet:2.1::el7	before 0:2.1.525-1.el7_9	0:2.1.525-1.el7_9
`rh-dotnet21-runtime` Red Hat:rhel_dotnet:2.1::el7	before 0:2.1-28.el7_9	0:2.1-28.el7_9
`dotnet` Red Hat:enterprise_linux:8::appstream	before 0:2.1.525-1.el8_4	0:2.1.525-1.el8_4
`dotnet-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:2.1.525-1.el8_4	0:2.1.525-1.el8_4
`dotnet-debugsource` Red Hat:enterprise_linux:8::appstream	before 0:2.1.525-1.el8_4	0:2.1.525-1.el8_4
`dotnet-host-fxr-2.1` Red Hat:enterprise_linux:8::appstream	before 0:2.1.29-1.el8_4	0:2.1.29-1.el8_4
`dotnet-host-fxr-2.1-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:2.1.29-1.el8_4	0:2.1.29-1.el8_4
`dotnet-runtime-2.1` Red Hat:enterprise_linux:8::appstream	before 0:2.1.29-1.el8_4	0:2.1.29-1.el8_4
`dotnet-runtime-2.1-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:2.1.29-1.el8_4	0:2.1.29-1.el8_4
`dotnet-sdk-2.1` Red Hat:enterprise_linux:8::appstream	before 0:2.1.525-1.el8_4	0:2.1.525-1.el8_4
`dotnet-sdk-2.1.5xx` Red Hat:enterprise_linux:8::appstream	before 0:2.1.525-1.el8_4	0:2.1.525-1.el8_4
`dotnet-sdk-2.1.5xx-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:2.1.525-1.el8_4	0:2.1.525-1.el8_4
`rh-dotnet50-aspnetcore-runtime-5.0` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.9-1.el7_9	0:5.0.9-1.el7_9
`rh-dotnet50-aspnetcore-targeting-pack-5.0` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.9-1.el7_9	0:5.0.9-1.el7_9
`rh-dotnet50-dotnet` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.206-1.el7_9	0:5.0.206-1.el7_9
`rh-dotnet50-dotnet-apphost-pack-5.0` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.9-1.el7_9	0:5.0.9-1.el7_9
`rh-dotnet50-dotnet-debuginfo` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.206-1.el7_9	0:5.0.206-1.el7_9
`rh-dotnet50-dotnet-host` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.9-1.el7_9	0:5.0.9-1.el7_9
`rh-dotnet50-dotnet-hostfxr-5.0` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.9-1.el7_9	0:5.0.9-1.el7_9
`rh-dotnet50-dotnet-runtime-5.0` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.9-1.el7_9	0:5.0.9-1.el7_9
`rh-dotnet50-dotnet-sdk-5.0` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.206-1.el7_9	0:5.0.206-1.el7_9
`rh-dotnet50-dotnet-targeting-pack-5.0` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.9-1.el7_9	0:5.0.9-1.el7_9
`rh-dotnet50-dotnet-templates-5.0` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.206-1.el7_9	0:5.0.206-1.el7_9
`rh-dotnet50-netstandard-targeting-pack-2.1` Red Hat:rhel_dotnet:5.0::el7 From an advisory covering 3 CVEs	before 0:5.0.206-1.el7_9	0:5.0.206-1.el7_9
`aspnetcore-runtime-5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.9-1.el8_4	0:5.0.9-1.el8_4
`aspnetcore-targeting-pack-5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.9-1.el8_4	0:5.0.9-1.el8_4
`dotnet` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.206-1.el8_4	0:5.0.206-1.el8_4
`dotnet-apphost-pack-5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.9-1.el8_4	0:5.0.9-1.el8_4
`dotnet-apphost-pack-5.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.9-1.el8_4	0:5.0.9-1.el8_4
`dotnet-host` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.9-1.el8_4	0:5.0.9-1.el8_4
`dotnet-host-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.9-1.el8_4	0:5.0.9-1.el8_4
`dotnet-hostfxr-5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.9-1.el8_4	0:5.0.9-1.el8_4
`dotnet-hostfxr-5.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.9-1.el8_4	0:5.0.9-1.el8_4
`dotnet-runtime-5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.9-1.el8_4	0:5.0.9-1.el8_4
`dotnet-runtime-5.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.9-1.el8_4	0:5.0.9-1.el8_4
`dotnet-sdk-5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.206-1.el8_4	0:5.0.206-1.el8_4
`dotnet-sdk-5.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.206-1.el8_4	0:5.0.206-1.el8_4
`dotnet-targeting-pack-5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.9-1.el8_4	0:5.0.9-1.el8_4
`dotnet-templates-5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.206-1.el8_4	0:5.0.206-1.el8_4
`dotnet5.0` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.206-1.el8_4	0:5.0.206-1.el8_4
`dotnet5.0-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.206-1.el8_4	0:5.0.206-1.el8_4
`dotnet5.0-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.206-1.el8_4	0:5.0.206-1.el8_4
`netstandard-targeting-pack-2.1` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 0:5.0.206-1.el8_4	0:5.0.206-1.el8_4

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-34485 is a medium vulnerability (CVSS 5.0) in Microsoft .net, published August 12, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.07%, the 81st percentile. Fixed in Microsoft.NETCore.App 2.1.29.

References

Show 29 moreShow less