Multiple vulnerabilities in Microsoft Developer Tools

Description

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A denial of service vulnerability in .NET and Visual Studio can be exploited remotely to cause denial of service.
2. A remote code execution vulnerability in Azure IoT SDK can be exploited remotely to execute arbitrary code.
3. An information disclosure vulnerability in .NET and Visual Studio can be exploited remotely to obtain sensitive information.

Original advisories

• CVE-2024-38168

• CVE-2024-38157
• CVE-2024-38167
• CVE-2024-38158

Related products

• Microsoft-Visual-Studio
• Microsoft-Azure
• .NET

CVE list

• CVE-2024-38168
  critical
• CVE-2024-38157
  high
• CVE-2024-38167
  high
• CVE-2024-38158
  high

KB list

• 5042132

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com