KLA48843 Multiple vulnerabilities in Microsoft Developer Tools

🗓️ 11 Apr 2023 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 55 Views

Multiple vulnerabilities in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, spoof user interface.

Reporter	Title	Published	Views	Family All 148
AlpineLinux	CVE-2023-28260	11 Apr 202319:13	–	alpinelinux
BDU FSTEC	The vulnerability of the Microsoft Visual Studio software development tool lies in its lack of access control mechanisms, which allows attackers to escalate their privileges.	13 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Visual Studio software allows a hacker to gain unauthorized access to protected information.	13 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Visual Studio software allows a hacker to execute arbitrary code.	14 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Visual Studio software allows attackers to perform spear-phishing attacks.	25 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Visual Studio software allows a hacker to execute arbitrary code.	25 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft .NET software platform, related to incorrect handling of the path to DLL libraries, allows a hacker to execute arbitrary code.	30 May 202300:00	–	bdu_fstec
Chainguard	CVE-2023-28260 vulnerabilities	11 Apr 202321:15	–	cgr
Circl	CVE-2023-24893	12 Apr 202300:23	–	circl
Circl	CVE-2023-28260	15 Jan 202500:15	–	circl

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28296
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28263
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24893
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28262
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28299
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28260
threats	www.threats.kaspersky.com/en/class/Exploit/
threats	www.threats.kaspersky.com/en/product/Microsoft-Visual-Studio/
support	www.support.microsoft.com/kb/5025916
support	www.support.microsoft.com/kb/5025915

28 Mar 2025 00:00Current

8.5High risk

Vulners AI Score8.5

CVSS 3.15.5 - 7.8

EPSS0.01531

SSVC