Multiple vulnerabilities in Microsoft Developer Tools

Описание

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, gain privileges.

Below is a complete list of vulnerabilities:

1. A security feature bypass vulnerability in NET, .NET Framework, and Visual Studio can be exploited remotely to bypass security restrictions.
2. A security feature bypass vulnerability in Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider can be exploited remotely to bypass security restrictions.
3. A denial of service vulnerability in .NET Core and Visual Studio can be exploited remotely to cause denial of service.
4. A denial of service vulnerability in .NET Framework can be exploited remotely to cause denial of service.
5. An elevation of privilege vulnerability in Visual Studio can be exploited remotely to gain privileges.
6. A denial of service vulnerability in Microsoft Identity can be exploited remotely to cause denial of service.

Первичный источник обнаружения

• CVE-2024-0057
  CVE-2024-0056
  CVE-2024-20672
  CVE-2024-21312
  CVE-2024-20656
  CVE-2024-21319
  

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-.NET-Framework
• Microsoft-Visual-Studio
• .NET

Список CVE

• CVE-2024-21319
  high
• CVE-2024-0057
  critical
• CVE-2024-0056
  critical
• CVE-2024-20672
  critical
• CVE-2024-21312
  critical
• CVE-2024-20656
  critical

Список KB

• 5033741
• 5034270
• 5030979
• 5033733
• 5034269
• 5034274
• 5034276
• 5034279
• 5034278
• 5033920
• 5034273
• 5034272
• 5034280
• 5034119
• 5033734
• 5034277
• 5034275
• 5033910

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com