KLA12141 Multiple vulnerabilities in Microsoft Developer Tools

🗓️ 13 Apr 2021 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 33 Views

Multiple vulnerabilities in Microsoft Developer Tools. Malicious users can exploit to gain privileges, execute arbitrary code, obtain sensitive information, and spoof user interface

Reporter	Title	Published	Views	Family All 178
0day.today	Microsoft Azure DevOps Server 2020.0.1 Cross Site Scripting Vulnerability	14 Apr 202100:00	–	zdt
Information Security Automation	Vulristics: Microsoft Patch Tuesdays Q2 2021	10 Jul 202100:14	–	avleonov
BDU FSTEC	The vulnerability of the Diagnostics Hub Standard Collector Service for Microsoft Windows operating systems allows a perpetrator to escalate their privileges.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Diagnostics Hub Standard Collector Service for Microsoft Windows operating systems allows a perpetrator to escalate their privileges.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Visual Studio Code’s source editor, related to improper code generation management, allows a hacker to execute arbitrary code.	23 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Diagnostics Hub Standard Collector Service for Microsoft Windows operating systems allows a perpetrator to escalate their privileges.	23 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Team Foundation Services component of the Azure DevOps Server development tool allows a perpetrator to gain unauthorized access to protected information.	27 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Visual Studio software installation process allows attackers to exploit their privileges.	27 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Visual Studio Code’s editor, related to errors in code generation control, allows a hacker to execute arbitrary code.	27 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Visual Studio Code’s editor, related to errors in code generation control, allows a hacker to execute arbitrary code.	27 Apr 202100:00	–	bdu_fstec

Source	Link
api	www.api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-28470
api	www.api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-28469
api	www.api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-28321
api	www.api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-27067
api	www.api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-28313
api	www.api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-28473
api	www.api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-28477
api	www.api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-28457
api	www.api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-28475
api	www.api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2021-28322

31 Mar 2025 00:00Current

9High risk

Vulners AI Score9

CVSS 26.8

CVSS 3.17.8

EPSS0.63034

SSVC