Multiple vulnerabilities in Microsoft Developer Tools

Description

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft SQL Server Integration Service (VS extension) can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in Visual Studio can be exploited remotely to execute arbitrary code.
3. A remote code execution vulnerability in Azure DevOps Server can be exploited remotely to execute arbitrary code.
4. An elevation of privilege vulnerability in Visual Studio can be exploited remotely to gain privileges.
5. A denial of service vulnerability in .NET Framework can be exploited remotely to cause denial of service.
6. A denial of service vulnerability in Visual Studio can be exploited remotely to cause denial of service.
7. A remote code execution vulnerability in GitHub can be exploited remotely to execute arbitrary code.
8. A remote code execution vulnerability in .NET and Visual Studio can be exploited remotely to execute arbitrary code.
9. Integer overflow vulnerability can be exploited to execute arbitrary code.

Fiches de renseignement originales

• CVE-2023-21815

• CVE-2023-21553
• CVE-2023-21566
• CVE-2023-21722
• CVE-2023-23381
• CVE-2023-21567
• CVE-2023-41953
• CVE-2023-21568
• CVE-2023-21808
• CVE-2022-23521

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Produits associés

• Microsoft-.NET-Framework
• Microsoft-SQL-Server
• Microsoft-Visual-Studio
• Microsoft-Azure

Liste CVE

• CVE-2022-23521
  critical
• CVE-2023-21568
  high
• CVE-2023-21815
  critical
• CVE-2023-21553
  critical
• CVE-2023-21566
  critical
• CVE-2023-21722
  warning
• CVE-2023-23381
  critical
• CVE-2023-21567
  high
• CVE-2023-21808
  critical
• CVE-2023-41953
  high

Liste KB

• 5022838
• 5022858
• 5023286
• 5022782
• 5022734
• 5022733
• 5022728
• 5022783
• 5022731
• 5022732
• 5022784
• 5022727
• 5022729
• 5022503
• 5022786
• 5023288
• 5022785
• 5022497
• 5022730
• 5022735
• 5025792
• 5026610

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com