Multiple vulnerabilities in Microsoft Developer Tools

Описание

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, cause denial of service.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Azure IoT SDK can be exploited remotely to spoof user interface.
2. A security feature bypass vulnerability in .NET Framework Device Guard can be exploited remotely to bypass security restrictions.
3. A denial of service vulnerability in .NET and .NET Core can be exploited remotely via specially crafted requests to cause denial of service.

Первичный источник обнаружения

• CVE-2018-8119
  CVE-2018-1039
  CVE-2018-0765
  

Связанные продукты

• Microsoft-.NET-Framework
• Microsoft-Azure

Список CVE

• CVE-2018-0765
  warning
• CVE-2018-1039
  warning
• CVE-2018-8119
  high

Список KB

• 4103723
• 4103716
• 4103731
• 4103721
• 4103727
• 4095873
• 4095513
• 4095872
• 4095512
• 4095875
• 4095515
• 4095874
• 4095514
• 4095876
• 4095517
• 4096495
• 4095519
• 4096494
• 4095518
• 4096236
• 4096237
• 4096235
• 4096416
• 4096417
• 4096418

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com