Multiple vulnerabilities in Microsoft Developer Tools

Description

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Visual Studio Code can be exploited remotely to obtain sensitive information.
2. A security feature bypass vulnerability in Visual Studio Code can be exploited remotely to bypass security restrictions.
3. An elevation of privilege vulnerability in .NET can be exploited remotely to gain privileges.
4. A remote code execution vulnerability in Azure DevOps Server can be exploited remotely to execute arbitrary code.
5. A denial of service vulnerability in .NET can be exploited remotely to cause denial of service.
6. An information disclosure vulnerability in ASP.NET Core can be exploited remotely to obtain sensitive information.
7. A denial of service vulnerability in ASP.NET Core can be exploited remotely to cause denial of service.
8. An elevation of privilege vulnerability in ASP.NET Core can be exploited remotely to gain privileges.
9. An information disclosure vulnerability in Azure DevOps Server can be exploited remotely to obtain sensitive information.
10. A remote code execution vulnerability in Visual Studio can be exploited remotely to execute arbitrary code.
11. A security feature bypass vulnerability in ASP.NET Core can be exploited remotely to bypass security restrictions.
12. A security feature bypass vulnerability in ASP.NET Core can be exploited remotely to gain privileges.
13. A security feature bypass vulnerability in .NET can be exploited remotely to bypass security restrictions.
14. A remote code execution vulnerability in Visual Studio Code can be exploited remotely to execute arbitrary code.
15. An information disclosure vulnerability in Visual Studio Code GitHub Pull Requests and Issues Extension can be exploited remotely to obtain sensitive information.
16. An elevation of privilege vulnerability in Visual Studio Code can be exploited remotely to gain privileges.
17. An elevation of privilege vulnerability in Azure DevOps Server can be exploited remotely to gain privileges.
18. An information disclosure vulnerability in PowerShell can be exploited remotely to obtain sensitive information.
19. An information disclosure vulnerability in Microsoft PowerShell can be exploited remotely to obtain sensitive information.

Original advisories

• CVE-2026-102230

• CVE-2026-102236
• CVE-2026-105544
• CVE-2026-109467
• CVE-2026-109475
• CVE-2026-109476
• CVE-2026-109478
• CVE-2026-109481
• CVE-2026-112745
• CVE-2026-114146
• CVE-2026-114147
• CVE-2026-114149
• CVE-2026-114150
• CVE-2026-114151
• CVE-2026-114152
• CVE-2026-114154
• CVE-2026-114155
• CVE-2026-114156
• CVE-2026-114157
• CVE-2026-114158
• CVE-2026-114159
• CVE-2026-114171
• CVE-2026-118741
• CVE-2026-118745
• CVE-2026-118746
• CVE-2026-118748
• CVE-2026-118749
• CVE-2026-119975
• CVE-2026-119976
• CVE-2026-119981
• CVE-2026-119982
• CVE-2026-119983
• CVE-2026-119985
• CVE-2026-120779
• CVE-2026-120780
• CVE-2026-120782
• CVE-2026-120783
• CVE-2026-120796
• CVE-2026-121660
• CVE-2026-121661
• CVE-2026-121662
• CVE-2026-121663
• CVE-2026-121664
• CVE-2026-121665
• CVE-2026-121669
• CVE-2026-121674
• CVE-2026-121675
• CVE-2026-122985
• CVE-2026-70094
• CVE-2026-85923

Exploitation

Related products

• Microsoft-Visual-Studio
• Microsoft-Windows
• Microsoft-Azure
• .NET
• PowerShell
• Visual-Studio-Code
• Microsoft-Visual-Studio-Code

CVE list

• CVE-2026-102230
  high
• CVE-2026-102236
  critical
• CVE-2026-105544
  critical
• CVE-2026-109467
  critical
• CVE-2026-109475
  critical
• CVE-2026-109476
  high
• CVE-2026-109478
  critical
• CVE-2026-109481
  critical
• CVE-2026-112745
  high
• CVE-2026-114146
  critical
• CVE-2026-114147
  critical
• CVE-2026-114149
  critical
• CVE-2026-114150
  high
• CVE-2026-114151
  critical
• CVE-2026-114152
  critical
• CVE-2026-114154
  critical
• CVE-2026-114155
  critical
• CVE-2026-114156
  high
• CVE-2026-114157
  critical
• CVE-2026-114158
  critical
• CVE-2026-114159
  critical
• CVE-2026-114171
  critical
• CVE-2026-118741
  critical
• CVE-2026-118745
  critical
• CVE-2026-118746
  high
• CVE-2026-118748
  critical
• CVE-2026-118749
  critical
• CVE-2026-119975
  critical
• CVE-2026-119976
  high
• CVE-2026-119981
  high
• CVE-2026-119982
  high
• CVE-2026-119983
  critical
• CVE-2026-119985
  critical
• CVE-2026-120779
  critical
• CVE-2026-120780
  critical
• CVE-2026-120782
  critical
• CVE-2026-120783
  high
• CVE-2026-120796
  high
• CVE-2026-121660
  critical
• CVE-2026-121661
  critical
• CVE-2026-121662
  critical
• CVE-2026-121663
  critical
• CVE-2026-121664
  critical
• CVE-2026-121665
  critical
• CVE-2026-121669
  high
• CVE-2026-121674
  high
• CVE-2026-121675
  high
• CVE-2026-122985
  high
• CVE-2026-70094
  critical
• CVE-2026-85923
  critical

KB list

• 5135241
• 5135242
• 5135243

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com