WID-SEC-W-2025-0093

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Developer Tools: Mehrere Schwachstellen

view advisory published 2025-01-14

Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio 2017, Microsoft .NET Framework, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Visual Studio 2019, Microsoft Visual Studio 2022 und Microsoft Windows ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen und vertrauliche Informationen preiszugeben.

01

describes (7)

Related CVEs.

IDseverity exploitable
CVE-2024-50338US——
Git Credential Manager (GCM) is a secure Git credential helper built on .NET that runs on Windows, macOS, and Linux. The Git credential protocol is text-based over standard input/o…
CVE-2025-21405US——
Visual Studio Elevation of Privilege Vulnerability
CVE-2025-21178US——
Visual Studio Remote Code Execution Vulnerability
CVE-2025-21176US——
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2025-21173US——
.NET Elevation of Privilege Vulnerability
CVE-2025-21172US——
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2025-21171US——
.NET Remote Code Execution Vulnerability
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan