DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Developer Tools: Mehrere Schwachstellen
view advisory published 2023-09-12
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Developer Tools ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen und seine Privilegien zu erweitern.
01
describes (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-38155US | high8.1 | — | ||
Azure DevOps Server Remote Code Execution Vulnerability | ||||
| CVE-2023-36799US | — | — | ||
.NET Core and Visual Studio Denial of Service Vulnerability | ||||
| CVE-2023-36796US | —OT elevated | — | ||
Visual Studio Remote Code Execution Vulnerability | ||||
| CVE-2023-36794US | —OT elevated | — | ||
Visual Studio Remote Code Execution Vulnerability | ||||
| CVE-2023-36793US | —OT elevated | — | ||
Visual Studio Remote Code Execution Vulnerability | ||||
| CVE-2023-36792US | —OT elevated | — | ||
Visual Studio Remote Code Execution Vulnerability | ||||
| CVE-2023-36788US | —OT elevated | — | ||
.NET Framework Remote Code Execution Vulnerability | ||||
| CVE-2023-36759US | — | — | ||
Visual Studio Elevation of Privilege Vulnerability | ||||
| CVE-2023-36758US | critical9.8 | — | ||
Visual Studio Elevation of Privilege Vulnerability | ||||
| CVE-2023-36742US | — | — | ||
Visual Studio Code Remote Code Execution Vulnerability | ||||
| CVE-2023-33136US | — | — | ||
Azure DevOps Server Remote Code Execution Vulnerability | ||||
| CVE-2023-39956US | medium6.6 | — | ||
Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Electron apps that are launched as command line executables are imp… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2023-5145 vom 2023-09-14external
- Oracle Linux Security Advisory ELSA-2023-5146 vom 2023-09-14external
- Oracle Linux Security Advisory ELSA-2023-6245 vom 2023-11-06external
- Red Hat Security Advisory RHSA-2023:5142 vom 2023-09-13external
- Red Hat Security Advisory RHSA-2023:5143 vom 2023-09-13external
- Red Hat Security Advisory RHSA-2023:5144 vom 2023-09-13external
- Red Hat Security Advisory RHSA-2023:5145 vom 2023-09-13external
- Red Hat Security Advisory RHSA-2023:5146 vom 2023-09-13external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan