Kaspersky ID:
KLA20235
検出日:
02/14/2023
更新日:
01/28/2026

説明

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service.

Below is a complete list of vulnerabilities:

  1. A remote code execution vulnerability in Microsoft SQL Server Integration Service (VS extension) can be exploited remotely to execute arbitrary code.
  2. A remote code execution vulnerability in Visual Studio can be exploited remotely to execute arbitrary code.
  3. A remote code execution vulnerability in Azure DevOps Server can be exploited remotely to execute arbitrary code.
  4. An elevation of privilege vulnerability in Visual Studio can be exploited remotely to gain privileges.
  5. A denial of service vulnerability in .NET Framework can be exploited remotely to cause denial of service.
  6. A denial of service vulnerability in Visual Studio can be exploited remotely to cause denial of service.
  7. A remote code execution vulnerability in GitHub can be exploited remotely to execute arbitrary code.
  8. A remote code execution vulnerability in .NET and Visual Studio can be exploited remotely to execute arbitrary code.
  9. Integer overflow vulnerability can be exploited to execute arbitrary code.

オリジナルアドバイザリー

エクスプロイテーション

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

関連製品

CVEリスト

  • CVE-2022-23521
    critical
  • CVE-2023-21568
    high
  • CVE-2023-21815
    critical
  • CVE-2023-21553
    critical
  • CVE-2023-21566
    critical
  • CVE-2023-21722
    warning
  • CVE-2023-23381
    critical
  • CVE-2023-21567
    high
  • CVE-2023-21808
    critical
  • CVE-2023-41953
    high

KBリスト

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com

この脆弱性についての記述に不正確な点がありますか? お知らせください!
Kaspersky IT Security Calculator
も参照してください
新しいカスペルスキー
あなたのデジタルライフを守る
も参照してください
Do you want to save your changes?
Your message has been sent successfully.