Multiple vulnerabilities in Microsoft Developer Tools

Description

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, cause denial of service, gain privileges, spoof user interface.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in GitHub Copilot and Visual Studio Code can be exploited remotely to obtain sensitive information.
2. A denial of service vulnerability in .NET, .NET Framework, and Visual Studio can be exploited remotely to cause denial of service.
3. A denial of service vulnerability in Node.js can be exploited remotely to cause denial of service.
4. A denial of service vulnerability in .NET can be exploited remotely to cause denial of service.
5. A spoofing vulnerability in .NET can be exploited remotely to spoof user interface.
6. A denial of service vulnerability in .NET Framework can be exploited remotely to cause denial of service.
7. A denial of service vulnerability in .NET and Visual Studio can be exploited remotely to cause denial of service.
8. A security feature bypass vulnerability in Microsoft PowerShell can be exploited remotely to bypass security restrictions.
9. Information disclosure vulnerability in Git for Windows can be exploited to obtain sensitive information.

Original advisories

• CVE-2026-23653

• CVE-2026-33116
• CVE-2026-21637
• CVE-2026-26171
• CVE-2026-32178
• CVE-2026-32226
• CVE-2026-23666
• CVE-2026-32203
• CVE-2026-26143
• CVE-2026-32631

Exploitation

Related products

• Microsoft-.NET-Framework
• Microsoft-Visual-Studio
• Microsoft-Windows
• .NET
• PowerShell
• Visual-Studio-Code
• Microsoft-Visual-Studio-Code

CVE list

• CVE-2026-21637
  critical
• CVE-2026-23653
  high
• CVE-2026-23666
  critical
• CVE-2026-26143
  critical
• CVE-2026-26171
  critical
• CVE-2026-32178
  critical
• CVE-2026-32203
  critical
• CVE-2026-32226
  high
• CVE-2026-33116
  critical
• CVE-2026-32631
  unknown

KB list

• 5082427
• 5086097
• 5082413
• 5082406
• 5082414
• 5082418
• 5082402
• 5082403
• 5082411
• 5082419
• 5082421
• 5082417
• 5082398
• 5082425
• 5082420
• 5082426
• 5086095
• 5082400
• 5082404
• 5086096
• 5082424

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com