Kaspersky ID:
KLA91336
Data de detecção:
10/13/2026
Atualizado:
10/14/2026

Descrição

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in SysInternals can be exploited remotely to gain privileges.
  2. An information disclosure vulnerability in Visual Studio Code can be exploited remotely to obtain sensitive information.
  3. A security feature bypass vulnerability in Visual Studio Code can be exploited remotely to bypass security restrictions.
  4. A remote code execution vulnerability in Visual Studio Code can be exploited remotely to execute arbitrary code.
  5. An elevation of privilege vulnerability in .NET and Visual Studio can be exploited remotely to gain privileges.
  6. A remote code execution vulnerability in ASP.NET Core can be exploited remotely to execute arbitrary code.
  7. A remote code execution vulnerability in Visual Studio Tools for Applications and SQL Server Management Studio can be exploited remotely to execute arbitrary code.
  8. A remote code execution vulnerability in Microsoft QUIC can be exploited remotely to execute arbitrary code.
  9. A security feature bypass vulnerability in .NET Framework can be exploited remotely to bypass security restrictions.
  10. A denial of service vulnerability in .NET can be exploited remotely to cause denial of service.
  11. An information disclosure vulnerability in .NET can be exploited remotely to obtain sensitive information.
  12. A remote code execution vulnerability in .NET Framework can be exploited remotely to execute arbitrary code.
  13. A denial of service vulnerability in ASP.NET Core can be exploited remotely to cause denial of service.
  14. An elevation of privilege vulnerability in .NET can be exploited remotely to gain privileges.
  15. A remote code execution vulnerability in .NET can be exploited remotely to execute arbitrary code.
  16. An elevation of privilege vulnerability in ASP.NET Core can be exploited remotely to gain privileges.
  17. A security feature bypass vulnerability in ASP.NET Core can be exploited remotely to bypass security restrictions.
  18. An elevation of privilege vulnerability in .NET Framework can be exploited remotely to gain privileges.
  19. An information disclosure vulnerability in Microsoft QUIC can be exploited remotely to obtain sensitive information.
  20. A tampering vulnerability in ASP.NET Core can be exploited remotely to spoof user interface.
  21. A denial of service vulnerability in MessagePack-CSharp can be exploited remotely to None.
  22. A spoofing vulnerability in Active Directory Federation Services (AD FS) can be exploited remotely to spoof user interface.
  23. A security feature bypass vulnerability in .NET can be exploited remotely to bypass security restrictions.
  24. A remote code execution vulnerability in Microsoft PowerShell can be exploited remotely to execute arbitrary code.
  25. A security feature bypass vulnerability in Microsoft PowerShell can be exploited remotely to bypass security restrictions.
  26. An information disclosure vulnerability in Active Directory Federation Services (AD FS) can be exploited remotely to obtain sensitive information.
  27. A tampering vulnerability in .NET Framework can be exploited remotely to spoof user interface.

Comunicados originais

Produtos relacionados

Lista de CVE

  • CVE-2026-100205
    unknown
  • CVE-2026-102229
    unknown
  • CVE-2026-102231
    unknown
  • CVE-2026-102232
    unknown
  • CVE-2026-102233
    unknown
  • CVE-2026-102851
    unknown
  • CVE-2026-102869
    unknown
  • CVE-2026-102870
    unknown
  • CVE-2026-103572
    unknown
  • CVE-2026-105016
    unknown
  • CVE-2026-105729
    unknown
  • CVE-2026-105732
    unknown
  • CVE-2026-108398
    unknown
  • CVE-2026-58280
    unknown
  • CVE-2026-66822
    unknown
  • CVE-2026-69370
    unknown
  • CVE-2026-69651
    unknown
  • CVE-2026-70007
    unknown
  • CVE-2026-70035
    unknown
  • CVE-2026-70159
    unknown
  • CVE-2026-70161
    unknown
  • CVE-2026-70162
    unknown
  • CVE-2026-70165
    unknown
  • CVE-2026-70174
    unknown
  • CVE-2026-70175
    unknown
  • CVE-2026-70179
    unknown
  • CVE-2026-70181
    unknown
  • CVE-2026-70183
    unknown
  • CVE-2026-70186
    unknown
  • CVE-2026-70188
    unknown
  • CVE-2026-70190
    unknown
  • CVE-2026-70194
    unknown
  • CVE-2026-70196
    unknown
  • CVE-2026-70197
    unknown
  • CVE-2026-83520
    unknown
  • CVE-2026-84008
    unknown
  • CVE-2026-85363
    unknown
  • CVE-2026-85790
    unknown
  • CVE-2026-87697
    unknown
  • CVE-2026-88092
    unknown
  • CVE-2026-96222
    unknown
  • CVE-2026-96224
    unknown
  • CVE-2026-96225
    unknown
  • CVE-2026-96229
    unknown
  • CVE-2026-96230
    unknown
  • CVE-2026-96231
    unknown
  • CVE-2026-96232
    unknown
  • CVE-2026-96233
    unknown
  • CVE-2026-96234
    unknown
  • CVE-2026-96235
    unknown
  • CVE-2026-96236
    unknown
  • CVE-2026-96237
    unknown
  • CVE-2026-96238
    unknown
  • CVE-2026-96251
    unknown
  • CVE-2026-96303
    unknown
  • CVE-2026-96957
    unknown
  • CVE-2026-96958
    unknown
  • CVE-2026-96959
    unknown
  • CVE-2026-96960
    unknown
  • CVE-2026-97788
    unknown
  • CVE-2026-97801
    unknown
  • CVE-2026-102234
    unknown
  • CVE-2026-102235
    unknown
  • CVE-2026-102238
    unknown
  • CVE-2026-70098
    unknown
  • CVE-2026-92707
    unknown

Lista de KB

Saiba mais

Descubra as estatísticas das vulnerabilidades que se espalham em sua região statistics.securelist.com

Encontrou uma imprecisão na descrição desta vulnerabilidade? Avise-nos!
Kaspersky Next:
cibersegurança redefinida
Saber mais
Novo Kaspersky!
Sua vida dgital merece proteção completa!
Saber mais
Do you want to save your changes?
Your message has been sent successfully.