KLA12396
RCE vulnerability in Microsoft Developer Tools

Updated: 01/18/2022
Detect date
?
12/16/2021
Severity
?
Critical
Description

Remote code execution vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to execute arbitrary code.

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Affected products

Team Foundation Server
Azure DevOps
Azure DevOps Server

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories

CVE-2021-44228

Impacts
?
ACE 
[?]
Related products
Team Foundation Server
CVE-IDS
?
CVE-2021-442289.3Critical
Microsoft official advisories
Microsoft Security Update Guide
Find out the statistics of the vulnerabilities spreading in your region