Kaspersky ID:
KLA62822
Erkennungsdatum:
01/09/2024
Aktualisiert:
01/28/2026

Beschreibung

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, gain privileges.

Below is a complete list of vulnerabilities:

  1. A security feature bypass vulnerability in NET, .NET Framework, and Visual Studio can be exploited remotely to bypass security restrictions.
  2. A security feature bypass vulnerability in Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider can be exploited remotely to bypass security restrictions.
  3. A denial of service vulnerability in .NET Core and Visual Studio can be exploited remotely to cause denial of service.
  4. A denial of service vulnerability in .NET Framework can be exploited remotely to cause denial of service.
  5. An elevation of privilege vulnerability in Visual Studio can be exploited remotely to gain privileges.
  6. A denial of service vulnerability in Microsoft Identity can be exploited remotely to cause denial of service.

Ursprüngliche Informationshinweise

Ausnutzung

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Betroffene Produkte

CVE Liste

  • CVE-2024-21319
    high
  • CVE-2024-0057
    critical
  • CVE-2024-0056
    critical
  • CVE-2024-20672
    critical
  • CVE-2024-21312
    critical
  • CVE-2024-20656
    critical

KB Liste

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com

Sie haben einen Fehler in der Beschreibung der Schwachstelle gefunden? Mitteilen!
Kaspersky Next
Let´s go Next: Cybersicherheit neu gedacht
Erfahren Sie mehr
Neu: Kaspersky!
Dein digitales Leben verdient umfassenden Schutz!
Erfahren Sie mehr
Do you want to save your changes?
Your message has been sent successfully.