Kaspersky ID:
KLA48843
Detekováno:
04/11/2023
Aktualizováno:
03/28/2025

Popis

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, spoof user interface.

Below is a complete list of vulnerabilities:

  1. A remote code execution vulnerability in Visual Studio can be exploited remotely to execute arbitrary code.
  2. An information disclosure vulnerability in Visual Studio can be exploited remotely to obtain sensitive information.
  3. A remote code execution vulnerability in Visual Studio Code can be exploited remotely to execute arbitrary code.
  4. An elevation of privilege vulnerability in Visual Studio can be exploited remotely to gain privileges.
  5. A spoofing vulnerability in Visual Studio can be exploited remotely to spoof user interface.
  6. A remote code execution vulnerability in .NET DLL Hijacking can be exploited remotely to execute arbitrary code.

Oficiální doporučení

Vykořisťování

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Související produkty

seznam CVE

  • CVE-2023-28260
    critical
  • CVE-2023-28296
    critical
  • CVE-2023-28263
    high
  • CVE-2023-24893
    critical
  • CVE-2023-28262
    critical
  • CVE-2023-28299
    high

seznam KB

Zobrazit více

Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com

Našli jste v popisu této chyby zabezpečení nepřesnost? Dej nám vědět!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Zjistěte více
Kaspersky Premium
Zjistěte více
Do you want to save your changes?
Your message has been sent successfully.