CVE-2021-36952

Description

References

• msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36952
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36952 · Patch
• zerodayinitiative.com/advisories/ZDI-21-1076 · Third Party Advisory

More vulnerabilities in visual studio 2017

• CVE-2026-47304CRITICAL 9.8Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
• CVE-2025-55240HIGH 7.3Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.
• CVE-2025-49739HIGH 8.8Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a…
• CVE-2025-32703MEDIUM 5.5Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.
• CVE-2025-24998HIGH 7.3Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.