Multiple vulnerabilities in Microsoft Developer Tools

Beschreibung

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. A denial of service vulnerability in .NET and Visual Studio can be exploited remotely to cause denial of service.
2. An elevation of privilege vulnerability in .NET, .NET Framework, and Visual Studio can be exploited remotely to gain privileges.
3. A denial of service vulnerability in .NET Core and Visual Studio can be exploited remotely to cause denial of service.
4. A remote code execution vulnerability in SQL Server Native Client OLE DB Provider can be exploited remotely to execute arbitrary code.

Ursprüngliche Informationshinweise

• CVE-2024-30105

• CVE-2024-38081
• CVE-2024-38095
• CVE-2024-35272

Betroffene Produkte

• Microsoft-.NET-Framework
• Microsoft-Visual-Studio
• .NET
• PowerShell

CVE Liste

• CVE-2024-38095
  critical
• CVE-2024-38081
  high
• CVE-2024-30105
  critical
• CVE-2024-35272
  critical

KB Liste

• 5040448
• 5041023
• 5041018
• 5041021
• 5039885
• 5041022
• 5040434
• 5041017
• 5039895
• 5041019
• 5041027
• 5041024
• 5041081
• 5041020
• 5041016
• 5041026
• 5040438
• 5041080

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com