NCSC-2025-0217

csafNLncsc_nl

NLIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.

Kwetsbaarheden verholpen in Microsoft Visual Studio

Advisory ansehen veröffentlicht 2025-07-08

Microsoft heeft kwetsbaarheden verholpen in Visual Studio.

01

beschreibt (9)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-46835US——
Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously…
CVE-2025-46334US——
Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of sh.exe or typical textconv filter programs such as astextpl…
CVE-2025-27614US——
Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that with some social engineering a user who has cloned the reposito…
CVE-2025-27613US——
Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the…
CVE-2025-48386US——
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The wincred c…
CVE-2025-48385US——
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When cloning…
CVE-2025-48384US—OT kritischKEV
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading…
CVE-2025-49739US——
Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-49714US——
Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally.
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan