Multiple vulnerabilities in Microsoft Developer Tools

Описание

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Visual Studio Code can be exploited remotely to gain privileges.
2. An elevation of privilege vulnerability in Visual Studio Installer can be exploited remotely to gain privileges.
3. Use after free vulnerability in media can be exploited to cause denial of service or execute arbitrary code.
4. An elevation of privilege vulnerability in Visual Studio Code JS Debug Extension can be exploited remotely to gain privileges.

Первичный источник обнаружения

• CVE-2025-24039
  CVE-2025-21206
  CVE-2023-32002
  CVE-2025-24042
  

Эксплуатация

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-Visual-Studio

Список CVE

• CVE-2023-32002
  critical
• CVE-2025-24039
  high
• CVE-2025-21206
  high
• CVE-2025-24042
  high

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com