Security Update for .NET Core SDK (Sep 2019)

The Microsoft .NET Core SDK installation on the remote host is version 2.1.x 2.1.509, or 2.1.606 or 2.1.802, 2.2.x 2.2.109 or 2.2.206 or 2.2.302. It is, therefore, affected by multiple vulnerabilities: - A denial of service vulnerability when .Net Core improperly handles web requests. An...

CVE-2019-1302

CVE-2019-1302 corresponds to an elevation‑of‑privilege vulnerability in ASP.NET Core web applications built with vulnerable templates, caused by improper sanitization of web requests. The linked documents (NVD, OSV, GHSA, CVE lists) consistently describe it as an ASP.NET Core elevation of privile...

KLA11554 Multiple vulnerabilities in Microsoft Developer tools

Multiple vulnerabilities were found in Microsoft Developer tools. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation...