Multiple vulnerabilities in Microsoft Developer Tools

Description

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. A denial of service vulnerability in .NET and Visual Studio can be exploited remotely to cause denial of service.
2. An elevation of privilege vulnerability in .NET, .NET Framework, and Visual Studio can be exploited remotely to gain privileges.
3. A denial of service vulnerability in .NET Core and Visual Studio can be exploited remotely to cause denial of service.
4. A remote code execution vulnerability in SQL Server Native Client OLE DB Provider can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2024-30105

• CVE-2024-38081
• CVE-2024-38095
• CVE-2024-35272

Related products

• Microsoft-.NET-Framework
• Microsoft-Visual-Studio
• .NET
• PowerShell

CVE list

• CVE-2024-38095
  critical
• CVE-2024-38081
  high
• CVE-2024-30105
  critical
• CVE-2024-35272
  critical

KB list

• 5040448
• 5041023
• 5041018
• 5041021
• 5039885
• 5041022
• 5040434
• 5041017
• 5039895
• 5041019
• 5041027
• 5041024
• 5041081
• 5041020
• 5041016
• 5041026
• 5040438
• 5041080

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com