Multiple vulnerabilities in Microsoft Developer Tools

Описание

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Visual Studio Code can be exploited remotely to obtain sensitive information.
2. A remote code execution vulnerability in Microsoft PowerShell can be exploited remotely to execute arbitrary code.
3. A security feature bypass vulnerability in Visual Studio Code Python Extension can be exploited remotely to bypass security restrictions.
4. An information disclosure vulnerability in PowerShell can be exploited remotely to obtain sensitive information.
5. An elevation of privilege vulnerability in .NET can be exploited remotely to gain privileges.
6. A security feature bypass vulnerability in Visual Studio Code can be exploited remotely to bypass security restrictions.
7. A remote code execution vulnerability in Visual Studio Code can be exploited remotely to execute arbitrary code.
8. An elevation of privilege vulnerability in PowerShell can be exploited remotely to gain privileges.
9. An elevation of privilege vulnerability in .NET can be exploited remotely to execute arbitrary code.
10. An elevation of privilege vulnerability in .NET Framework can be exploited remotely to gain privileges.
11. A remote code execution vulnerability in .NET Framework can be exploited remotely to execute arbitrary code.
12. An information disclosure vulnerability in Microsoft QUIC can be exploited remotely to obtain sensitive information.
13. A security feature bypass vulnerability in .NET can be exploited remotely to bypass security restrictions.
14. An information disclosure vulnerability in .NET can be exploited remotely to obtain sensitive information.
15. A denial of service vulnerability in .NET can be exploited remotely to cause denial of service.
16. A security feature bypass vulnerability in CoPilot Chat can be exploited remotely to bypass security restrictions.
17. An elevation of privilege vulnerability in GitHub Copilot and Visual Studio Code can be exploited remotely to gain privileges.
18. A security feature bypass vulnerability in Microsoft PowerShell can be exploited remotely to bypass security restrictions.
19. A remote code execution vulnerability in .NET Core can be exploited remotely to execute arbitrary code.

Первичный источник обнаружения

• CVE-2026-47285
  CVE-2026-54981
  CVE-2026-58612
  CVE-2026-58641
  CVE-2026-58650
  CVE-2026-59113
  CVE-2026-59119
  CVE-2026-62871
  CVE-2026-62872
  CVE-2026-62886
  CVE-2026-62897
  CVE-2026-62898
  CVE-2026-62899
  CVE-2026-62900
  CVE-2026-62901
  CVE-2026-62902
  CVE-2026-62909
  CVE-2026-65675
  CVE-2026-65810
  CVE-2026-69278
  CVE-2026-69306
  CVE-2026-69320
  CVE-2026-70335
  CVE-2026-70336
  CVE-2026-70337
  CVE-2026-70338
  CVE-2026-70354
  CVE-2026-50523
  

Эксплуатация

Связанные продукты

• Microsoft-.NET-Framework
• Microsoft-Visual-Studio
• Microsoft-Windows
• .NET
• PowerShell
• Visual-Studio-Code
• Microsoft-Visual-Studio-Code

Список CVE

• CVE-2026-47285
  high
• CVE-2026-54981
  critical
• CVE-2026-58612
  critical
• CVE-2026-58641
  critical
• CVE-2026-58650
  critical
• CVE-2026-59113
  critical
• CVE-2026-59119
  high
• CVE-2026-62871
  critical
• CVE-2026-62872
  critical
• CVE-2026-62886
  critical
• CVE-2026-62897
  high
• CVE-2026-62898
  critical
• CVE-2026-62899
  high
• CVE-2026-62900
  high
• CVE-2026-62901
  critical
• CVE-2026-62902
  high
• CVE-2026-62909
  critical
• CVE-2026-65675
  high
• CVE-2026-65810
  critical
• CVE-2026-69278
  critical
• CVE-2026-69306
  critical
• CVE-2026-69320
  critical
• CVE-2026-70335
  critical
• CVE-2026-70336
  critical
• CVE-2026-70337
  critical
• CVE-2026-70338
  critical
• CVE-2026-70354
  critical
• CVE-2026-50523
  critical

Список KB

• 5120418
• 5120695
• 5120698
• 5120699
• 5120700
• 5120701
• 5120702
• 5120703
• 5120704
• 5120705
• 5120706
• 5120708
• 5120709
• 5120710
• 5120711
• 5120713
• 5120714
• 5120716
• 5120747
• 5122104
• 5122105
• 5122106
• 5126042
• 5126043
• 5126044
• 5126045
• 5126046
• 5126047
• 5126048
• 5126049
• 5126050
• 5126051
• 5126052
• 5126053
• 5126421
• 5126422
• 5126424

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com