Multiple vulnerabilities in Microsoft Developer Tools

Описание

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Visual Studio Code can be exploited remotely to gain privileges.
2. A security feature bypass vulnerability in Microsoft Visual Studio Code CoPilot Chat can be exploited remotely to bypass security restrictions.
3. An elevation of privilege vulnerability in .NET SDK can be exploited remotely to gain privileges.
4. A tampering vulnerability in .NET can be exploited remotely to spoof user interface.
5. A denial of service vulnerability in ASP.NET Core can be exploited remotely to cause denial of service.
6. An elevation of privilege vulnerability in Microsoft Live Share Canvas SDK can be exploited remotely to gain privileges.
7. An information disclosure vulnerability in Visual Studio Code can be exploited remotely to obtain sensitive information.
8. A tampering vulnerability in Visual Studio Code can be exploited remotely to spoof user interface.
9. A remote code execution vulnerability in Visual Studio Code MSSQL Extension can be exploited remotely to gain privileges.
10. A security feature bypass vulnerability in Visual Studio Code can be exploited remotely to bypass security restrictions.

Первичный источник обнаружения

• CVE-2026-40376

• CVE-2026-48569
• CVE-2026-47287
• CVE-2026-47281
• CVE-2026-47284
• CVE-2026-45482
• CVE-2026-45490
• CVE-2026-45491
• CVE-2026-45591
• CVE-2026-45644
• CVE-2026-47292

Связанные продукты

• Microsoft-Visual-Studio
• Microsoft-Windows
• .NET
• Visual-Studio-Code
• Microsoft-Visual-Studio-Code

Список CVE

• CVE-2026-40376
  critical
• CVE-2026-45482
  critical
• CVE-2026-45490
  critical
• CVE-2026-45491
  high
• CVE-2026-45591
  critical
• CVE-2026-45644
  critical
• CVE-2026-47281
  critical
• CVE-2026-47284
  high
• CVE-2026-47287
  high
• CVE-2026-47292
  critical
• CVE-2026-48569
  high

Список KB

• 5097148
• 5097149
• 5097150

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com