NCSC-2025-0217

csafNLncsc_nl

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in Microsoft Visual Studio

view advisory published 2025-07-08

Microsoft heeft kwetsbaarheden verholpen in Visual Studio.

01

describes (9)

Related CVEs.

IDseverity exploitable
CVE-2025-46835US——
Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously…
CVE-2025-46334US——
Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of sh.exe or typical textconv filter programs such as astextpl…
CVE-2025-27614US——
Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that with some social engineering a user who has cloned the reposito…
CVE-2025-27613US——
Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the…
CVE-2025-48386US——
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The wincred c…
CVE-2025-48385US——
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When cloning…
CVE-2025-48384US—OT criticalKEV
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading…
CVE-2025-49739US——
Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-49714US——
Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally.
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan