CVE-2021-36952: Visual Studio Remote Code Execution Vulnerability
CVE-2021-36952 is a remote code execution vulnerability in Visual Studio, rated Important by Microsoft, with a CVSS 3.1 base score of 7.8 (High). An attacker can exploit it by an attacker with local access, without any privileges and only if a user takes an action. Microsoft has not reported exploitation in the wild and rates exploitation as less likely. The EPSS model estimates a 51.46% probability of exploitation activity in the next 30 days, higher than 99% of all scored vulnerabilities. Microsoft released the fix on 14 September 2021 in the September 2021 Patch Tuesday. It affects 3 products in 1 product family (Developer Tools).