CVE-2021-34477

HIGH 7.8CVE-2021-34477 · Published 14/07/2021 · updated 10/08/2026

In short

CVE-2021-34477 is a HIGH (CVSS 7.8) vulnerability affecting .net education bundle sdk install tool (microsoft), .net install tool for extension authors (microsoft).
Chance of exploitation in the next 30 days (EPSS): 0.57%, higher than 47.3% of all vulnerabilities.
Fix: update to 0.7.0, 1.2.0 or later.

Package	Affected versions	Patched versions
.net education bundle sdk install tool microsoft	`≥ 0.6.0, < 0.7.0`	`0.7.0`
.net install tool for extension authors microsoft	`≥ 1.1.0, < 1.2.0`	`1.2.0`

Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.