DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Developer Tools: Mehrere Schwachstellen
view advisory published 2025-10-14
Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio, .NET Framework, Windows Server, ASP.NET, PowerShell und Windows ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, und um Informationen offenzulegen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-55315US | — | Exploit | ||
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network. | ||||
| CVE-2025-55248US | medium5.7 | — | ||
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network. | ||||
| CVE-2025-55247US | high7.3 | — | ||
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-55240US | — | — | ||
Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-25004US | high7.3 | — | ||
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-54132US | high7.5 | — | ||
Cursor is a code editor built for programming with AI. In versions below 1.3, Mermaid (which is used to render diagrams) allows embedding images which then get rendered by Cursor i… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2025:18148 vom 2025-10-15external
- Red Hat Security Advisory RHSA-2025:18149 vom 2025-10-15external
- Red Hat Security Advisory RHSA-2025:18150 vom 2025-10-15external
- Red Hat Security Advisory RHSA-2025:18151 vom 2025-10-15external
- Red Hat Security Advisory RHSA-2025:18152 vom 2025-10-15external
- Red Hat Security Advisory RHSA-2025:18153 vom 2025-10-15external
- Red Hat Security Advisory RHSA-2025:18256 vom 2025-10-16external
- Red Hat Security Advisory RHSA-2025:23225 vom 2025-12-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan