Microsoft Developer Tools: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 5

• High 7.5
  CVE-2025-24043

  WinDbg Remote Code Execution Vulnerability

  Improper verification of cryptographic signature in .NET allows an authorized attacker to execute code over a network.

  Microsoft WinDbg dotnet-sos dotnet-debugger-extensions NuGet
  Mar 11, 2025
• High 7.3
  CVE-2025-24998

  Visual Studio Elevation of Privilege Vulnerability

  Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

  Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Microsoft Visual Studio 2022 version 17.8
  Mar 11, 2025
• High 7.3
  CVE-2025-25003

  Visual Studio Elevation of Privilege Vulnerability

  Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

  Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.8 Microsoft Visual Studio 2022 version 17.12
  Mar 11, 2025
• High 7.3
  CVE-2025-26631

  Visual Studio Code Elevation of Privilege Vulnerability

  Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally.

  Microsoft Visual Studio Code
  Mar 11, 2025
• High 7.0
  CVE-2025-24070

  ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

  Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.8 Microsoft Visual Studio 2022 version 17.12 Microsoft Visual Studio 2022 version 17.10 Ubuntu Alpine NuGet
  Mar 11, 2025

Revision history

1. 2025-07-07 #3

   Referenz(en) aufgenommen: EUVD-2025-20507

2. 2025-03-12 #2

   Neue Updates von Oracle Linux aufgenommen

3. 2025-03-11 #1

   Initiale Fassung

References

• Microsoft Leitfaden für Sicherheitsupdates
  https://msrc.microsoft.com/update-guide/
• Red Hat Security Advisory RHSA-2025:2668 vom 2025-03-12
  https://access.redhat.com/errata/RHSA-2025:2668
• Red Hat Security Advisory RHSA-2025:2669 vom 2025-03-12
  https://access.redhat.com/errata/RHSA-2025:2669
• Red Hat Security Advisory RHSA-2025:2670 vom 2025-03-11
  https://access.redhat.com/errata/RHSA-2025:2670
• Red Hat Security Advisory RHSA-2025:2666 vom 2025-03-11
  https://access.redhat.com/errata/RHSA-2025:2666
• Red Hat Security Advisory RHSA-2025:2667 vom 2025-03-12
  https://access.redhat.com/errata/RHSA-2025:2667
• Ubuntu Security Notice USN-7345-1 vom 2025-03-12
  https://ubuntu.com/security/notices/USN-7345-1
• Oracle Linux Security Advisory ELSA-2025-2670 vom 2025-03-13
  https://linux.oracle.com/errata/ELSA-2025-2670.html
• Oracle Linux Security Advisory ELSA-2025-2668 vom 2025-03-12
  https://linux.oracle.com/errata/ELSA-2025-2668.html
• Oracle Linux Security Advisory ELSA-2025-2669 vom 2025-03-12
  https://linux.oracle.com/errata/ELSA-2025-2669.html
• Oracle Linux Security Advisory ELSA-2025-2667 vom 2025-03-13
  https://linux.oracle.com/errata/ELSA-2025-2667.html