Açıklama
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface, obtain sensitive information, gain privileges.
Below is a complete list of vulnerabilities:
- A security feature bypass vulnerability in Windows can be exploited remotely to bypass security restrictions.
- A remote code execution vulnerability in .NET Framework and Visual Studio can be exploited remotely via specially crafted file to execute arbitrary code.
- A spoofing vulnerability in .NET Framework and Visual Studio can be exploited remotely to spoof user interface.
- A cross-site-scripting (XSS) vulnerability Team Foundation Server can be exploited remotely via specially crafted payload to spoof user interface.
- An information disclosure vulnerability in Azure IoT Java SDK can be exploited remotely to obtain sensitive information.
- An elevation of privilege vulnerability in Azure IoT Java SDK can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Visual Studio Code can be exploited remotely to execute arbitrary code.
Orijinal öneriler
- CVE-2019-0613
- CVE-2019-0657
- CVE-2019-0742
- CVE-2019-0632
- CVE-2019-0741
- CVE-2019-0627
- CVE-2019-0729
- CVE-2019-0728
- CVE-2019-0743
İlgili ürünler
- Microsoft-.NET-Framework
- Microsoft-Visual-Studio
- Microsoft-Windows
- Microsoft-Windows-Server
- Microsoft-Windows-10
- Team-Foundation-Server
- Microsoft-Azure
CVE Listesi
- CVE-2019-0627 warning
- CVE-2019-0631 warning
- CVE-2019-0632 warning
- CVE-2019-0741 warning
- CVE-2019-0743 warning
- CVE-2019-0613 critical
- CVE-2019-0742 warning
- CVE-2019-0728 critical
- CVE-2019-0657 warning
- CVE-2019-0729 critical
KB Listesi
Daha fazlasını okuyun
Bölgenizde yayılan güvenlik açıklarının istatistiklerini öğrenin statistics.securelist.com
Bu güvenlik açığının açıklamasında bir tutarsızlık mı tespit ettiniz? Bize bildirin!