Kaspersky ID:
KLA61979
Detekováno:
11/14/2023
Aktualizováno:
03/26/2025

Popis

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, bypass security restrictions, spoof user interface.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in .NET, .NET Framework, and Visual Studio can be exploited remotely to gain privileges.
  2. A denial of service vulnerability in Visual Studio can be exploited remotely to cause denial of service.
  3. A security feature bypass vulnerability in ASP.NET Core can be exploited remotely to bypass security restrictions.
  4. A denial of service vulnerability in ASP.NET Core can be exploited remotely to cause denial of service.
  5. A spoofing vulnerability in Visual Studio Code Jupyter Extension can be exploited remotely to spoof user interface.
  6. A security feature bypass vulnerability in ASP.NET can be exploited remotely to bypass security restrictions.

Oficiální doporučení

Související produkty

seznam CVE

  • CVE-2023-36558
    high
  • CVE-2023-36049
    critical
  • CVE-2023-36042
    high
  • CVE-2023-36038
    critical
  • CVE-2023-36018
    critical
  • CVE-2023-36560
    critical

seznam KB

Zobrazit více

Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com

Našli jste v popisu této chyby zabezpečení nepřesnost? Dej nám vědět!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Zjistěte více
Kaspersky Premium
Zjistěte více
Do you want to save your changes?
Your message has been sent successfully.