Multiple vulnerabilities in Microsoft Developer Tools

Описание

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A denial of service vulnerability in .NET and Visual Studio can be exploited remotely to cause denial of service.
2. A remote code execution vulnerability in Azure IoT SDK can be exploited remotely to execute arbitrary code.
3. An information disclosure vulnerability in .NET and Visual Studio can be exploited remotely to obtain sensitive information.

Первичный источник обнаружения

• CVE-2024-38168
  CVE-2024-38157
  CVE-2024-38167
  CVE-2024-38158
  

Связанные продукты

• Microsoft-Visual-Studio
• Microsoft-Azure
• .NET

Список CVE

• CVE-2024-38168
  critical
• CVE-2024-38157
  high
• CVE-2024-38167
  high
• CVE-2024-38158
  high

Список KB

• 5042132

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com