Kaspersky ID:
KLA61979
Date de la détection:
11/14/2023
Mis à jour:
03/26/2025

Description

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, bypass security restrictions, spoof user interface.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in .NET, .NET Framework, and Visual Studio can be exploited remotely to gain privileges.
  2. A denial of service vulnerability in Visual Studio can be exploited remotely to cause denial of service.
  3. A security feature bypass vulnerability in ASP.NET Core can be exploited remotely to bypass security restrictions.
  4. A denial of service vulnerability in ASP.NET Core can be exploited remotely to cause denial of service.
  5. A spoofing vulnerability in Visual Studio Code Jupyter Extension can be exploited remotely to spoof user interface.
  6. A security feature bypass vulnerability in ASP.NET can be exploited remotely to bypass security restrictions.

Fiches de renseignement originales

Produits associés

Liste CVE

  • CVE-2023-36558
    high
  • CVE-2023-36049
    critical
  • CVE-2023-36042
    high
  • CVE-2023-36038
    critical
  • CVE-2023-36018
    critical
  • CVE-2023-36560
    critical

Liste KB

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com

Vous avez trouvé une inexactitude dans la description de cette vulnérabilité ? Faites-le nous savoir !
Kaspersky IT Security Calculator:
Calculez le profil de sécurité de votre entreprise
Apprendre encore plus
Kaspersky!
Votre vie en ligne mérite une protection complète!
Apprendre encore plus
Do you want to save your changes?
Your message has been sent successfully.