Multiple vulnerabilities in Microsoft Developer Tools

説明

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Visual Studio Code can be exploited remotely to gain privileges.
2. An elevation of privilege vulnerability in Visual Studio Installer can be exploited remotely to gain privileges.
3. Use after free vulnerability in media can be exploited to cause denial of service or execute arbitrary code.
4. An elevation of privilege vulnerability in Visual Studio Code JS Debug Extension can be exploited remotely to gain privileges.

オリジナルアドバイザリー

• CVE-2025-24039

• CVE-2025-21206
• CVE-2023-32002
• CVE-2025-24042

エクスプロイテーション

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

関連製品

• Microsoft-Visual-Studio

CVEリスト

• CVE-2023-32002
  critical
• CVE-2025-24039
  high
• CVE-2025-21206
  high
• CVE-2025-24042
  high

KBリスト

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com