Remote No

Type Arbitrary code execution

Description

A remote code execution vulnerability exists in .NET 5 and .NET Core due to how text encoding is performed.

AVG-1449 dotnet-runtime, dotnet-sdk 3.1.8.sdk108-1 High Vulnerable FS#69317

https://msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26701
https://github.com/dotnet/announcements/issues/178