Multiple vulnerabilities in Microsoft Developer Tools

Описание

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. A denial of service vulnerability in .NET and Visual Studio can be exploited remotely to cause denial of service.
2. An elevation of privilege vulnerability in .NET, .NET Framework, and Visual Studio can be exploited remotely to gain privileges.
3. A remote code execution vulnerability in .NET and Visual Studio can be exploited remotely to execute arbitrary code.
4. A denial of service vulnerability in .NET Core and Visual Studio can be exploited remotely to cause denial of service.
5. A remote code execution vulnerability in SQL Server Native Client OLE DB Provider can be exploited remotely to execute arbitrary code.

Первичный источник обнаружения

• CVE-2024-30105
  CVE-2024-35264
  CVE-2024-38081
  CVE-2024-38095
  CVE-2024-35272
  

Связанные продукты

• Microsoft-.NET-Framework
• Microsoft-Visual-Studio
• .NET
• PowerShell

Список CVE

• CVE-2024-38095
  high
• CVE-2024-38081
  high
• CVE-2024-35264
  high
• CVE-2024-30105
  high
• CVE-2024-35272
  high

Список KB

• 5040448
• 5041023
• 5041018
• 5041021
• 5039885
• 5041022
• 5040434
• 5041017
• 5039895
• 5041019
• 5041027
• 5041024
• 5041081
• 5041020
• 5041016
• 5041026
• 5040438
• 5041080

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com