Multiple vulnerabilities in Microsoft Development Tools

Beschreibung

Multiple serious vulnerabilities were found in Microsoft Development Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Multiple memory corruption vulnerabilities in ChakraCore can be exploited remotely to execute arbitrary code.
2. An information disclosure vulnerability in Microsoft SQL Server Management Studio can be exploited remotely via specially crafted XMLA file to obtain sensitive information.
3. An information disclosure vulnerability in Microsoft SQL Server Management Studio can be exploited remotely via specially crafted XEL file to obtain sensitive information.
4. An information disclosure vulnerability in Microsoft SQL Server Management Studio can be exploited remotely via specially crafted XML file to obtain sensitive information.

Ursprüngliche Informationshinweise

• CVE-2018-8500

• CVE-2018-8510
• CVE-2018-8503
• CVE-2018-8473
• CVE-2018-8511
• CVE-2018-8505
• CVE-2018-8532
• CVE-2018-8531
• CVE-2018-8513
• CVE-2018-8527
• CVE-2018-8533
• CVE-2018-8292

CVE Liste

• CVE-2018-8500
  critical
• CVE-2018-8510
  critical
• CVE-2018-8503
  critical
• CVE-2018-8473
  critical
• CVE-2018-8511
  critical
• CVE-2018-8505
  critical
• CVE-2018-8532
  critical
• CVE-2018-8531
  critical
• CVE-2018-8513
  critical
• CVE-2018-8527
  critical
• CVE-2018-8533
  critical
• CVE-2018-8292
  critical

KB Liste

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com