Multiple vulnerabilities in Microsoft Developer Tools

Описание

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Microsoft Windows Sysmon can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in PowerShell can be exploited remotely to execute arbitrary code.
3. A remote code execution vulnerability in .NET Framework can be exploited remotely to execute arbitrary code.

Первичный источник обнаружения

• CVE-2022-44704
  CVE-2022-41076
  CVE-2022-41089
  

Эксплуатация

Public exploits exist for this vulnerability.

Связанные продукты

• Microsoft-.NET-Framework
• Microsoft-Visual-Studio
• Microsoft-Windows

Список CVE

• CVE-2022-41076
  critical
• CVE-2022-44704
  critical
• CVE-2022-41089
  critical

Список KB

• 5021243
• 5021953
• 5020880
• 5021082
• 5021094
• 5021093
• 5021954
• 5021085
• 5021092
• 5021086
• 5020873
• 5021080
• 5020868
• 5021088
• 5021095
• 5021081
• 5021079
• 5021091
• 5021955
• 5021089
• 5021090
• 5021087

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com