Multiple vulnerabilities in Microsoft Developer Tools

Descrição

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Visual Studio Code can be exploited remotely to gain privileges.
2. A security feature bypass vulnerability in Microsoft Visual Studio Code CoPilot Chat can be exploited remotely to bypass security restrictions.
3. An elevation of privilege vulnerability in .NET SDK can be exploited remotely to gain privileges.
4. A tampering vulnerability in .NET can be exploited remotely to spoof user interface.
5. A denial of service vulnerability in ASP.NET Core can be exploited remotely to cause denial of service.
6. An elevation of privilege vulnerability in Microsoft Live Share Canvas SDK can be exploited remotely to gain privileges.
7. An information disclosure vulnerability in Visual Studio Code can be exploited remotely to obtain sensitive information.
8. A tampering vulnerability in Visual Studio Code can be exploited remotely to spoof user interface.
9. A remote code execution vulnerability in Visual Studio Code MSSQL Extension can be exploited remotely to gain privileges.
10. A security feature bypass vulnerability in Visual Studio Code can be exploited remotely to bypass security restrictions.

Comunicados originais

• CVE-2026-40376

• CVE-2026-48569
• CVE-2026-47287
• CVE-2026-47281
• CVE-2026-47284
• CVE-2026-45482
• CVE-2026-45490
• CVE-2026-45491
• CVE-2026-45591
• CVE-2026-45644
• CVE-2026-47292

Produtos relacionados

• Microsoft-Visual-Studio
• Microsoft-Windows
• .NET
• Visual-Studio-Code
• Microsoft-Visual-Studio-Code

Lista de CVE

• CVE-2026-40376
  critical
• CVE-2026-45482
  critical
• CVE-2026-45490
  critical
• CVE-2026-45491
  high
• CVE-2026-45591
  critical
• CVE-2026-45644
  critical
• CVE-2026-47281
  critical
• CVE-2026-47284
  high
• CVE-2026-47287
  high
• CVE-2026-47292
  critical
• CVE-2026-48569
  high

Lista de KB

• 5097148
• 5097149
• 5097150

Saiba mais

Descubra as estatísticas das vulnerabilidades que se espalham em sua região statistics.securelist.com