DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen
view advisory published 2023-11-14
Ein entfernter Angreifer kann mehrere Schwachstellen in Microsoft .NET Framework, Microsoft ASP.NET, Microsoft Visual Studio und Microsoft Visual Studio Code ausnutzen, um Sicherheitsmechanismen zu umgehen, um seine Privilegien zu erhöhen und um einen Denial of Service Zustand herbeizuführen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-36558US | medium5.5 | — | ||
ASP.NET Core Security Feature Bypass Vulnerability | ||||
| CVE-2023-36038US | high7.5 | — | ||
ASP.NET Core Denial of Service Vulnerability | ||||
| CVE-2023-36049US | critical9.8 | — | ||
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | ||||
| CVE-2023-36560US | high8.8 | — | ||
ASP.NET Security Feature Bypass Vulnerability | ||||
| CVE-2023-36042US | medium5.5 | — | ||
Visual Studio Denial of Service Vulnerability | ||||
| CVE-2023-36018US | critical9.8 | — | ||
Visual Studio Code Jupyter Extension Spoofing Vulnerability | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2023:7253 vom 2023-11-16external
- Red Hat Security Advisory RHSA-2023:7254 vom 2023-11-16external
- Red Hat Security Advisory RHSA-2023:7255 vom 2023-11-16external
- Red Hat Security Advisory RHSA-2023:7256 vom 2023-11-16external
- Red Hat Security Advisory RHSA-2023:7257 vom 2023-11-16external
- Red Hat Security Advisory RHSA-2023:7258 vom 2023-11-16external
- Red Hat Security Advisory RHSA-2023:7259 vom 2023-11-16external
- Oracle Linux Security Advisory ELSA-2023-7253 vom 2023-11-28external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan