Description
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, bypass security restrictions.
Below is a complete list of vulnerabilities:
- A spoofing vulnerability in Azure DevOps Server can be exploited remotely to spoof user interface.
- A remote code execution vulnerability in Visual Studio can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Visual Studio Code Remote Development Extension can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Visual Studio Code Java Extension Pack can be exploited remotely to execute arbitrary code.
- A spoofing vulnerability in Azure DevOps Server and Team Foundation Services can be exploited remotely to spoof user interface.
- A security feature bypass vulnerability in Azure SDK for C can be exploited remotely to bypass security restrictions.
- A remote code execution vulnerability in Visual Studio Code can be exploited remotely to execute arbitrary code.
Fiches de renseignement originales
Produits associés
Liste CVE
- CVE-2020-17135 high
- CVE-2020-17156 critical
- CVE-2020-17148 critical
- CVE-2020-17159 critical
- CVE-2020-17145 high
- CVE-2020-17002 critical
- CVE-2020-17150 critical
Liste KB
En savoir plus
Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com
Vous avez trouvé une inexactitude dans la description de cette vulnérabilité ? Faites-le nous savoir !