Multiple vulnerabilities in Microsoft Development Tools

Description

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft PowerShell can be exploited remotely via specially crafted files to execute arbitrary code.
2. A tampering vulnerability in .NET Core can be exploited remotely via specially crafted files to spoof user interface.
3. A tampering vulnerability in Microsoft PowerShell can be exploited remotely via specially crafted application to spoof user interface.
4. A remote code execution vulnerability in Team Foundation Server (TFS) can be exploited remotely to execute arbitrary code.
5. A cross-site-scripting (XSS) vulnerability in Team Foundation Server can be exploited remotely via specially crafted payload to spoof user interface.

Original advisories

• CVE-2018-8256

• CVE-2018-8416
• CVE-2018-8415
• CVE-2018-8529
• CVE-2018-8602

Related products

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10
• Team-Foundation-Server

CVE list

• CVE-2018-8415
  warning
• CVE-2018-8256
  critical
• CVE-2018-8416
  warning
• CVE-2018-8602
  warning
• CVE-2018-8529
  critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com