Popis
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, gain privileges.
Below is a complete list of vulnerabilities:
- A remote code execution vulnerability in Visual Studio Code WSL Extension can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Visual Studio Code can be exploited remotely to execute arbitrary code.
- A spoofing vulnerability in Microsoft PowerShell can be exploited remotely to spoof user interface.
- A spoofing vulnerability in Visual Studio Code can be exploited remotely to spoof user interface.
- A remote code execution vulnerability in Bot Framework SDK can be exploited remotely to execute arbitrary code.
- A spoofing vulnerability in Microsoft BizTalk ESB Toolkit can be exploited remotely to spoof user interface.
- An elevation of privilege vulnerability in ASP.NET Core and Visual Studio can be exploited remotely to gain privileges.
Oficiální doporučení
Vykořisťování
Public exploits exist for this vulnerability.
Související produkty
seznam CVE
- CVE-2021-43907 critical
- CVE-2021-43891 critical
- CVE-2021-43896 high
- CVE-2021-43908 warning
- CVE-2021-43225 critical
- CVE-2021-43892 high
- CVE-2021-43877 critical
seznam KB
Zobrazit více
Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com
Našli jste v popisu této chyby zabezpečení nepřesnost? Dej nám vědět!