Multiple vulnerabilities in Microsoft Developer Tools

Description

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Visual Studio Code can be exploited remotely to obtain sensitive information.
2. A remote code execution vulnerability in Microsoft PowerShell can be exploited remotely to execute arbitrary code.
3. A security feature bypass vulnerability in Visual Studio Code Python Extension can be exploited remotely to bypass security restrictions.
4. An information disclosure vulnerability in PowerShell can be exploited remotely to obtain sensitive information.
5. An elevation of privilege vulnerability in .NET can be exploited remotely to gain privileges.
6. A security feature bypass vulnerability in Visual Studio Code can be exploited remotely to bypass security restrictions.
7. A remote code execution vulnerability in Visual Studio Code can be exploited remotely to execute arbitrary code.
8. An elevation of privilege vulnerability in PowerShell can be exploited remotely to gain privileges.
9. An elevation of privilege vulnerability in .NET can be exploited remotely to execute arbitrary code.
10. An elevation of privilege vulnerability in .NET Framework can be exploited remotely to gain privileges.
11. A remote code execution vulnerability in .NET Framework can be exploited remotely to execute arbitrary code.
12. An information disclosure vulnerability in Microsoft QUIC can be exploited remotely to obtain sensitive information.
13. A security feature bypass vulnerability in .NET can be exploited remotely to bypass security restrictions.
14. An information disclosure vulnerability in .NET can be exploited remotely to obtain sensitive information.
15. A denial of service vulnerability in .NET can be exploited remotely to cause denial of service.
16. A security feature bypass vulnerability in CoPilot Chat can be exploited remotely to bypass security restrictions.
17. An elevation of privilege vulnerability in GitHub Copilot and Visual Studio Code can be exploited remotely to gain privileges.
18. A security feature bypass vulnerability in Microsoft PowerShell can be exploited remotely to bypass security restrictions.
19. A remote code execution vulnerability in .NET Core can be exploited remotely to execute arbitrary code.

Fiches de renseignement originales

• CVE-2026-47285

• CVE-2026-54981
• CVE-2026-58612
• CVE-2026-58641
• CVE-2026-58650
• CVE-2026-59113
• CVE-2026-59119
• CVE-2026-62871
• CVE-2026-62872
• CVE-2026-62886
• CVE-2026-62897
• CVE-2026-62898
• CVE-2026-62899
• CVE-2026-62900
• CVE-2026-62901
• CVE-2026-62902
• CVE-2026-62909
• CVE-2026-65675
• CVE-2026-65810
• CVE-2026-69278
• CVE-2026-69306
• CVE-2026-69320
• CVE-2026-70335
• CVE-2026-70336
• CVE-2026-70337
• CVE-2026-70338
• CVE-2026-70354
• CVE-2026-50523

Produits associés

• Microsoft-.NET-Framework
• Microsoft-Visual-Studio
• Microsoft-Windows
• .NET
• PowerShell
• Visual-Studio-Code
• Microsoft-Visual-Studio-Code

Liste CVE

• CVE-2026-47285
  high
• CVE-2026-54981
  critical
• CVE-2026-58612
  critical
• CVE-2026-58641
  critical
• CVE-2026-58650
  critical
• CVE-2026-59113
  critical
• CVE-2026-59119
  high
• CVE-2026-62871
  critical
• CVE-2026-62872
  critical
• CVE-2026-62886
  critical
• CVE-2026-62897
  high
• CVE-2026-62898
  critical
• CVE-2026-62899
  high
• CVE-2026-62900
  high
• CVE-2026-62901
  critical
• CVE-2026-62902
  high
• CVE-2026-62909
  critical
• CVE-2026-65675
  high
• CVE-2026-65810
  critical
• CVE-2026-69278
  critical
• CVE-2026-69306
  critical
• CVE-2026-69320
  critical
• CVE-2026-70335
  critical
• CVE-2026-70336
  critical
• CVE-2026-70337
  critical
• CVE-2026-70338
  critical
• CVE-2026-70354
  critical
• CVE-2026-50523
  critical

Liste KB

• 5120418
• 5120695
• 5120698
• 5120699
• 5120700
• 5120701
• 5120702
• 5120703
• 5120704
• 5120705
• 5120706
• 5120708
• 5120709
• 5120710
• 5120711
• 5120713
• 5120714
• 5120716
• 5120747
• 5122104
• 5122105
• 5122106
• 5126042
• 5126043
• 5126044
• 5126045
• 5126046
• 5126047
• 5126048
• 5126049
• 5126050
• 5126051
• 5126052
• 5126053
• 5126421
• 5126422
• 5126424

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com