DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Developer Tools: Mehrere Schwachstellen
view advisory published 2025-05-13
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio, Microsoft Visual Studio Code, Microsoft Azure DevOps und Microsoft .NET Framework ausnutzen, um seine Privilegien zu eskalieren, Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, beliebigen Programmcode auszuführen oder Daten zu manipulieren.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-26646US | — | — | ||
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network. | ||||
| CVE-2025-32703US | — | — | ||
Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally. | ||||
| CVE-2025-32702US | — | — | ||
Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-21264US | — | — | ||
Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | ||||
| CVE-2025-29813US | critical9.8 | — | ||
Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network. | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2025-7571 vom 2025-05-17external
- Red Hat Security Advisory RHSA-2025:7571 vom 2025-05-14external
- Red Hat Security Advisory RHSA-2025:7589 vom 2025-05-14external
- Red Hat Security Advisory RHSA-2025:7598 vom 2025-05-14external
- Red Hat Security Advisory RHSA-2025:7599 vom 2025-05-14external
- Red Hat Security Advisory RHSA-2025:7600 vom 2025-05-14external
- Red Hat Security Advisory RHSA-2025:7601 vom 2025-05-14external
- Red Hat Security Advisory RHSA-2025:7603 vom 2025-05-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan