NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Microsoft Developer Tools
view advisory published 2026-06-09
Microsoft heeft kwetsbaarheden verholpen in Developer Tools.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-48569US | medium5.5 | — | ||
Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | ||||
| CVE-2026-47292US | — | — | ||
Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally. | ||||
| CVE-2026-47287US | — | — | ||
Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network. | ||||
| CVE-2026-47284US | — | — | ||
Exposure of sensitive information to an unauthorized actor in Visual Studio Code allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-47281US | —OT elevated | — | ||
Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-45644US | — | — | ||
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Live Share Canvas SDK allows an authorized attacker to elevate privileges over a n… | ||||
| CVE-2026-45591US | — | — | ||
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-45491US | medium5.5 | — | ||
Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally. | ||||
| CVE-2026-45490US | —OT elevated | — | ||
Improper authorization in .NET allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-45482US | — | — | ||
Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature… | ||||
| CVE-2026-40376US | high8.1 | — | ||
Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. | ||||
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan