DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Developer Tools: Mehrere Schwachstellen
view advisory published 2025-03-11
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio, Microsoft Visual Studio Code und Microsoft ASP.NET ausnutzen, um seine Privilegien zu erhöhen und beliebigen Code auszuführen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-26631US | — | — | ||
Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-25003US | — | — | ||
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-24998US | — | — | ||
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-24070US | — | — | ||
Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2025-24043US | — | — | ||
Improper verification of cryptographic signature in .NET allows an authorized attacker to execute code over a network. | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2025:2666 vom 2025-03-11external
- Red Hat Security Advisory RHSA-2025:2667 vom 2025-03-12external
- Red Hat Security Advisory RHSA-2025:2668 vom 2025-03-12external
- Red Hat Security Advisory RHSA-2025:2669 vom 2025-03-12external
- Red Hat Security Advisory RHSA-2025:2670 vom 2025-03-11external
- Oracle Linux Security Advisory ELSA-2025-2667 vom 2025-03-13external
- Oracle Linux Security Advisory ELSA-2025-2668 vom 2025-03-12external
- Oracle Linux Security Advisory ELSA-2025-2669 vom 2025-03-12external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan