Multiple vulnerabilities in Microsoft Developer Tools

Description

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in .NET Core and Visual Studio can be exploited remotely to obtain sensitive information.
2. An information disclosure vulnerability in ASP.NET Core and Visual Studio can be exploited remotely to obtain sensitive information.
3. A denial of service vulnerability in .NET Core and Visual Studio can be exploited remotely to cause denial of service.

Original advisories

• CVE-2021-34485

• CVE-2021-34532
• CVE-2021-26423

Related products

• Microsoft-.NET-Framework
• Microsoft-Visual-Studio
• Microsoft-ASP.NET-MVC

CVE list

• CVE-2021-34485
  high
• CVE-2021-34532
  high
• CVE-2021-26423
  critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com