NLIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Kwetsbaarheden verholpen in Microsoft Developer Tools
Advisory ansehen veröffentlicht 2026-06-09
Microsoft heeft kwetsbaarheden verholpen in Developer Tools.
01
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-48569US | medium5.5 | — | ||
Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | ||||
| CVE-2026-47292US | — | — | ||
Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally. | ||||
| CVE-2026-47287US | — | — | ||
Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network. | ||||
| CVE-2026-47284US | — | — | ||
Exposure of sensitive information to an unauthorized actor in Visual Studio Code allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-47281US | —OT erhöht | — | ||
Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-45644US | — | — | ||
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Live Share Canvas SDK allows an authorized attacker to elevate privileges over a n… | ||||
| CVE-2026-45591US | — | — | ||
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-45491US | medium5.5 | — | ||
Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally. | ||||
| CVE-2026-45490US | —OT erhöht | — | ||
Improper authorization in .NET allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-45482US | — | — | ||
Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature… | ||||
| CVE-2026-40376US | high8.1 | — | ||
Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. | ||||
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan