Multiple vulnerabilities in Microsoft Developer Tools

Description

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in SysInternals can be exploited remotely to gain privileges.
2. An information disclosure vulnerability in Visual Studio Code can be exploited remotely to obtain sensitive information.
3. A security feature bypass vulnerability in Visual Studio Code can be exploited remotely to bypass security restrictions.
4. A remote code execution vulnerability in Visual Studio Code can be exploited remotely to execute arbitrary code.
5. An elevation of privilege vulnerability in .NET and Visual Studio can be exploited remotely to gain privileges.
6. A remote code execution vulnerability in ASP.NET Core can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in Visual Studio Tools for Applications and SQL Server Management Studio can be exploited remotely to execute arbitrary code.
8. A remote code execution vulnerability in Microsoft QUIC can be exploited remotely to execute arbitrary code.
9. A security feature bypass vulnerability in .NET Framework can be exploited remotely to bypass security restrictions.
10. A denial of service vulnerability in .NET can be exploited remotely to cause denial of service.
11. An information disclosure vulnerability in .NET can be exploited remotely to obtain sensitive information.
12. A remote code execution vulnerability in .NET Framework can be exploited remotely to execute arbitrary code.
13. A denial of service vulnerability in ASP.NET Core can be exploited remotely to cause denial of service.
14. An elevation of privilege vulnerability in .NET can be exploited remotely to gain privileges.
15. A remote code execution vulnerability in .NET can be exploited remotely to execute arbitrary code.
16. An elevation of privilege vulnerability in ASP.NET Core can be exploited remotely to gain privileges.
17. A security feature bypass vulnerability in ASP.NET Core can be exploited remotely to bypass security restrictions.
18. An elevation of privilege vulnerability in .NET Framework can be exploited remotely to gain privileges.
19. An information disclosure vulnerability in Microsoft QUIC can be exploited remotely to obtain sensitive information.
20. A tampering vulnerability in ASP.NET Core can be exploited remotely to spoof user interface.
21. A denial of service vulnerability in MessagePack-CSharp can be exploited remotely to None.
22. A spoofing vulnerability in Active Directory Federation Services (AD FS) can be exploited remotely to spoof user interface.
23. A security feature bypass vulnerability in .NET can be exploited remotely to bypass security restrictions.
24. A remote code execution vulnerability in Microsoft PowerShell can be exploited remotely to execute arbitrary code.
25. A security feature bypass vulnerability in Microsoft PowerShell can be exploited remotely to bypass security restrictions.
26. An information disclosure vulnerability in Active Directory Federation Services (AD FS) can be exploited remotely to obtain sensitive information.
27. A tampering vulnerability in .NET Framework can be exploited remotely to spoof user interface.

Fiches de renseignement originales

• CVE-2026-100205

• CVE-2026-102229
• CVE-2026-102231
• CVE-2026-102232
• CVE-2026-102233
• CVE-2026-102234
• CVE-2026-102235
• CVE-2026-102238
• CVE-2026-102851
• CVE-2026-102869
• CVE-2026-102870
• CVE-2026-103572
• CVE-2026-105016
• CVE-2026-105729
• CVE-2026-105732
• CVE-2026-108398
• CVE-2026-58280
• CVE-2026-66822
• CVE-2026-69370
• CVE-2026-69651
• CVE-2026-70007
• CVE-2026-70035
• CVE-2026-70098
• CVE-2026-70159
• CVE-2026-70161
• CVE-2026-70162
• CVE-2026-70165
• CVE-2026-70174
• CVE-2026-70175
• CVE-2026-70179
• CVE-2026-70181
• CVE-2026-70183
• CVE-2026-70186
• CVE-2026-70188
• CVE-2026-70190
• CVE-2026-70194
• CVE-2026-70196
• CVE-2026-70197
• CVE-2026-83520
• CVE-2026-84008
• CVE-2026-85363
• CVE-2026-85790
• CVE-2026-87697
• CVE-2026-88092
• CVE-2026-92707
• CVE-2026-96222
• CVE-2026-96224
• CVE-2026-96225
• CVE-2026-96229
• CVE-2026-96230
• CVE-2026-96231
• CVE-2026-96232
• CVE-2026-96233
• CVE-2026-96234
• CVE-2026-96235
• CVE-2026-96236
• CVE-2026-96237
• CVE-2026-96238
• CVE-2026-96251
• CVE-2026-96303
• CVE-2026-96957
• CVE-2026-96958
• CVE-2026-96959
• CVE-2026-96960
• CVE-2026-97788
• CVE-2026-97801

Produits associés

• Microsoft-.NET-Framework
• Microsoft-Visual-Studio
• Microsoft-Windows
• .NET
• PowerShell
• Visual-Studio-Code
• Microsoft-Visual-Studio-Code

Liste CVE

• CVE-2026-100205
  unknown
• CVE-2026-102229
  unknown
• CVE-2026-102231
  unknown
• CVE-2026-102232
  unknown
• CVE-2026-102233
  unknown
• CVE-2026-102851
  unknown
• CVE-2026-102869
  unknown
• CVE-2026-102870
  unknown
• CVE-2026-103572
  unknown
• CVE-2026-105016
  unknown
• CVE-2026-105729
  unknown
• CVE-2026-105732
  unknown
• CVE-2026-108398
  unknown
• CVE-2026-58280
  unknown
• CVE-2026-66822
  unknown
• CVE-2026-69370
  unknown
• CVE-2026-69651
  unknown
• CVE-2026-70007
  unknown
• CVE-2026-70035
  unknown
• CVE-2026-70159
  unknown
• CVE-2026-70161
  unknown
• CVE-2026-70162
  unknown
• CVE-2026-70165
  unknown
• CVE-2026-70174
  unknown
• CVE-2026-70175
  unknown
• CVE-2026-70179
  unknown
• CVE-2026-70181
  unknown
• CVE-2026-70183
  unknown
• CVE-2026-70186
  unknown
• CVE-2026-70188
  unknown
• CVE-2026-70190
  unknown
• CVE-2026-70194
  unknown
• CVE-2026-70196
  unknown
• CVE-2026-70197
  unknown
• CVE-2026-83520
  unknown
• CVE-2026-84008
  unknown
• CVE-2026-85363
  unknown
• CVE-2026-85790
  unknown
• CVE-2026-87697
  unknown
• CVE-2026-88092
  unknown
• CVE-2026-96222
  unknown
• CVE-2026-96224
  unknown
• CVE-2026-96225
  unknown
• CVE-2026-96229
  unknown
• CVE-2026-96230
  unknown
• CVE-2026-96231
  unknown
• CVE-2026-96232
  unknown
• CVE-2026-96233
  unknown
• CVE-2026-96234
  unknown
• CVE-2026-96235
  unknown
• CVE-2026-96236
  unknown
• CVE-2026-96237
  unknown
• CVE-2026-96238
  unknown
• CVE-2026-96251
  unknown
• CVE-2026-96303
  unknown
• CVE-2026-96957
  unknown
• CVE-2026-96958
  unknown
• CVE-2026-96959
  unknown
• CVE-2026-96960
  unknown
• CVE-2026-97788
  unknown
• CVE-2026-97801
  unknown
• CVE-2026-102234
  unknown
• CVE-2026-102235
  unknown
• CVE-2026-102238
  unknown
• CVE-2026-70098
  unknown
• CVE-2026-92707
  unknown

Liste KB

• 5126868
• 5127660
• 5127664
• 5127666
• 5127667
• 5127668
• 5127683
• 5127684
• 5127685
• 5127686
• 5127687
• 5127688
• 5127689
• 5127690
• 5127691
• 5127692
• 5127693
• 5127694
• 5127696
• 5130034
• 5130035
• 5130036

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com