Description
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, gain privileges.
Below is a complete list of vulnerabilities:
- A remote code execution vulnerability in MediaWiki PandocUpload Extension can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Visual Studio Code GitHub Pull Requests and Issues Extension can be exploited remotely to execute arbitrary code.
- A spoofing vulnerability in Mono Authenticode Validation can be exploited remotely to spoof user interface.
- A security feature bypass vulnerability in ASP.NET and Visual Studio can be exploited remotely to bypass security restrictions.
- An elevation of privilege vulnerability in .NET and Visual Studio can be exploited remotely to gain privileges.
Fiches de renseignement originales
Produits associés
Liste CVE
- CVE-2023-33127 critical
- CVE-2023-33170 critical
- CVE-2023-35333 critical
- CVE-2023-36867 critical
- CVE-2023-35373 high
Liste KB
En savoir plus
Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com
Vous avez trouvé une inexactitude dans la description de cette vulnérabilité ? Faites-le nous savoir !