DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Developer Tools: Mehrere Schwachstellen
view advisory published 2025-06-10
Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio 2022, Microsoft WIndows SDK und Microsoft .NET Framework ausnutzen, um beliebigen Programmcode auszuführen, und um seine Privilegien zu erhöhen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-47959US | — | — | ||
Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code over a network. | ||||
| CVE-2025-30399US | — | — | ||
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2025-47962US | — | Exploit | ||
Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally. | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2025:8812 vom 2025-06-11external
- Red Hat Security Advisory RHSA-2025:8813 vom 2025-06-11external
- Red Hat Security Advisory RHSA-2025:8814 vom 2025-06-11external
- Red Hat Security Advisory RHSA-2025:8815 vom 2025-06-11external
- Red Hat Security Advisory RHSA-2025:8816 vom 2025-06-11external
- Red Hat Security Advisory RHSA-2025:8817 vom 2025-06-11external
- Red Hat Security Advisory RHSA-2025:9066 vom 2025-06-16external
- Oracle Linux Security Advisory ELSA-2025-8812 vom 2025-06-12external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan