Kaspersky ID:
KLA78978
Detect Date:
01/14/2025
Updated:
02/13/2025

Description

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, bypass security restrictions.

Below is a complete list of vulnerabilities:

  1. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
  2. An elevation of privilege vulnerability in .NET can be exploited remotely to gain privileges.
  3. A remote code execution vulnerability in Visual Studio can be exploited remotely to execute arbitrary code.
  4. Information disclosure vulnerability in .NET can be exploited to obtain sensitive information.
  5. An elevation of privilege vulnerability in Visual Studio can be exploited remotely to gain privileges.

Original advisories

Related products

CVE list

  • CVE-2025-21176
    critical
  • CVE-2025-21172
    critical
  • CVE-2025-21171
    critical
  • CVE-2024-50338
    warning
  • CVE-2025-21173
    warning
  • CVE-2025-21178
    critical
  • CVE-2025-21405
    high

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Confirm changes?
Your message has been sent successfully.