Multiple vulnerabilities in Microsoft Developer Tools

Description

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Visual Studio can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in Visual Studio can be exploited remotely to execute arbitrary code.
3. An elevation of privilege vulnerability in WiX toolset can be exploited to gain privileges.

Original advisories

• CVE-2024-29060

• CVE-2024-30052
• CVE-2024-29187

Exploitation

Public exploits exist for this vulnerability.

CVE list

• CVE-2024-29187
  high
• CVE-2024-29060
  high
• CVE-2024-30052
  warning

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com