KLA11419
Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface, obtain sensitive information, gain privileges.

Below is a complete list of vulnerabilities:

1. A security feature bypass vulnerability in Windows can be exploited remotely to bypass security restrictions.
2. A remote code execution vulnerability in .NET Framework and Visual Studio can be exploited remotely via specially crafted file to execute arbitrary code.
3. A spoofing vulnerability in .NET Framework and Visual Studio can be exploited remotely to spoof user interface.
4. A cross-site-scripting (XSS) vulnerability Team Foundation Server can be exploited remotely via specially crafted payload to spoof user interface.
5. An information disclosure vulnerability in Azure IoT Java SDK can be exploited remotely to obtain sensitive information.
6. An elevation of privilege vulnerability in Azure IoT Java SDK can be exploited remotely to gain privileges.
7. A remote code execution vulnerability in Visual Studio Code can be exploited remotely to execute arbitrary code.

.NET Core 1.0
.NET Core 2.1
.NET Core 2.2
Java SDK for Azure IoT
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5
Microsoft .NET Framework 3.5.1
Microsoft .NET Framework 4.5.2
Microsoft .NET Framework 4.6
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
Microsoft .NET Framework 4.6/4.6.1/4.6.2
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2
Microsoft .NET Framework 4.7.1/4.7.2
Microsoft .NET Framework 4.7.2
Microsoft .NET Framework 4.7/4.7.1/4.7.2
Microsoft Visual Studio 2017
Team Foundation Server 2018 Update 3.2
Visual Studio Code
Windows 10 for 32-bit Systems
Windows Server, version 1803 (Server Core Installation)
PowerShell Core 6.2
Windows 10 for x64-based Systems
Windows Server 2016 (Server Core installation)
Windows 10 Version 1803 for ARM64-based Systems
Windows Server 2016
Windows 10 Version 1709 for x64-based Systems
Windows 10 Version 1709 for ARM64-based Systems
Windows 10 Version 1703 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019 (Server Core installation)
PowerShell Core 6.1
Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)
Windows 10 Version 1803 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows Server, version 1709 (Server Core Installation)
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1703 for 32-bit Systems
Windows Server 2019

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

CVE-2019-0631
CVE-2019-0613
CVE-2019-0657
CVE-2019-0742
CVE-2019-0632
CVE-2019-0741
CVE-2019-0627
CVE-2019-0729
CVE-2019-0728
CVE-2019-0743

4487020
4487017
4486996
4487026
4487018
4483452
4483450
4487081
4487079
4487078
4487124
4487121
4487123
4487122