Summary
Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio, Microsoft .NET Framework, Microsoft .NET, Microsoft PowerShell und Microsoft Visual Studio Code ausnutzen, um vertrauliche Informationen offenzulegen, Spoofing-Angriffe durchzuführen, einen Denial-of-Service-Zustand herbeizuführen oder Sicherheitsmaßnahmen zu umgehen, was möglicherweise die Ausführung von beliebigem Code ermöglicht.
Product
Microsoft Visual Studio ist eine integrierte Entwicklungsumgebung für Hochsprachen.
Microsoft .NET Framework ist eine Komponente des Microsoft Windows-Betriebssystems, das die Erstellung und Ausführung von Softwareanwendungen und Webdiensten ermöglicht. Es beinhaltet sowohl eine Laufzeitumgebung als auch ein Framework von Klassenbibliotheken (APIs), u. a. für die Programmiersprache ASP (ASP.NET), den Datenzugriff (ADO.NET), intelligente Clientanwendungen (Windows Forms) und weitere.
Microsoft .NET ist ein Software-Framework für die Entwicklung und Ausführung von Anwendungen.
PowerShell ist ein plattformübergreifendes Framework von Microsoft zur Automatisierung, Konfiguration und Verwaltung von Systemen, das einen Kommandozeileninterpreter inklusive Skriptsprache bietet.
Visual Studio Code ist ein Quelltext-Editor von Microsoft.
Vulnerabilities 10
-
High 7.8
Microsoft PowerShell Security Feature Bypass Vulnerability
Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
-
High 7.5
.NET Framework Denial of Service Vulnerability
Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.
-
High 7.5
.NET Denial of Service Vulnerability
Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
-
High 7.5
.NET Spoofing Vulnerability
Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.
-
High 7.5
.NET and Visual Studio Denial of Service Vulnerability
Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.
-
High 7.5
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
-
High 7.4
Git for Windows: `git clone` from manipulated repositories can leak NTLM hashes to arbitrary servers
Git for Windows is the Windows port of Git. Versions prior to 2.53.0.windows.3 do not have protections that prevent attackers from obtaining a user's NTLM hash. The NTLM hash can be obtained by tricking users into cloning a malicious repository, or checking o…
-
Medium 5.9
A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCal…
-
Medium 5.9
.NET Framework Denial of Service Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.
-
Medium 5.7
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network.
Revision history
-
#11
Neue Updates von HITACHI aufgenommen
-
#10
Neue Updates von Red Hat aufgenommen
-
#9
Neue Updates von Red Hat aufgenommen
-
#8
Neue Updates von Ubuntu aufgenommen
-
#7
Neue Updates von Red Hat aufgenommen
-
#6
Neue Updates von Fedora aufgenommen
-
#5
Neue Updates von Oracle Linux aufgenommen
-
#4
Neue Updates von Oracle Linux und Rocky Enterprise Software Foundation aufgenommen
-
#3
Neue Updates von Red Hat und Ubuntu aufgenommen
-
#2
Referenz(en) aufgenommen: EUVD-2026-22991
-
#1
Initiale Fassung
References
-
Microsoft Leitfaden für Sicherheitsupdates
https://msrc.microsoft.com/update-guide/
-
Red Hat Security Advisory RHSA-2026:8471 vom 2026-04-16
https://access.redhat.com/errata/RHSA-2026:8471
-
Red Hat Security Advisory RHSA-2026:8470 vom 2026-04-16
https://access.redhat.com/errata/RHSA-2026:8470
-
Red Hat Security Advisory RHSA-2026:8469 vom 2026-04-16
https://access.redhat.com/errata/RHSA-2026:8469
-
Red Hat Security Advisory RHSA-2026:8468 vom 2026-04-16
https://access.redhat.com/errata/RHSA-2026:8468
-
Red Hat Security Advisory RHSA-2026:8467 vom 2026-04-16
https://access.redhat.com/errata/RHSA-2026:8467
-
Ubuntu Security Notice USN-8176-1 vom 2026-04-16
https://ubuntu.com/security/notices/USN-8176-1
-
Red Hat Security Advisory RHSA-2026:8475 vom 2026-04-16
https://access.redhat.com/errata/RHSA-2026:8475
-
Red Hat Security Advisory RHSA-2026:8474 vom 2026-04-16
https://access.redhat.com/errata/RHSA-2026:8474
-
Red Hat Security Advisory RHSA-2026:8473 vom 2026-04-16
https://access.redhat.com/errata/RHSA-2026:8473
-
Red Hat Security Advisory RHSA-2026:8472 vom 2026-04-16
https://access.redhat.com/errata/RHSA-2026:8472
-
Oracle Linux Security Advisory ELSA-2026-8470 vom 2026-04-17
https://linux.oracle.com/errata/ELSA-2026-8470.html
-
Oracle Linux Security Advisory ELSA-2026-8472 vom 2026-04-17
https://linux.oracle.com/errata/ELSA-2026-8472.html
-
Oracle Linux Security Advisory ELSA-2026-8467 vom 2026-04-17
https://linux.oracle.com/errata/ELSA-2026-8467.html
-
Oracle Linux Security Advisory ELSA-2026-8474 vom 2026-04-17
https://linux.oracle.com/errata/ELSA-2026-8474.html
-
Oracle Linux Security Advisory ELSA-2026-8471 vom 2026-04-17
https://linux.oracle.com/errata/ELSA-2026-8471.html
-
Oracle Linux Security Advisory ELSA-2026-8473 vom 2026-04-19
http://linux.oracle.com/errata/ELSA-2026-8473.html
-
Rocky Linux Security Advisory RLSA-2026:8471 vom 2026-04-19
https://errata.build.resf.org/RLSA-2026:8471
-
Rocky Linux Security Advisory RLSA-2026:8470 vom 2026-04-18
https://errata.build.resf.org/RLSA-2026:8470
-
Rocky Linux Security Advisory RLSA-2026:8469 vom 2026-04-19
https://errata.build.resf.org/RLSA-2026:8469
-
Rocky Linux Security Advisory RLSA-2026:8473 vom 2026-04-18
https://errata.build.resf.org/RLSA-2026:8473
-
Rocky Linux Security Advisory RLSA-2026:8467 vom 2026-04-18
https://errata.build.resf.org/RLSA-2026:8467
-
Rocky Linux Security Advisory RLSA-2026:8468 vom 2026-04-18
https://errata.build.resf.org/RLSA-2026:8468
-
Rocky Linux Security Advisory RLSA-2026:8472 vom 2026-04-18
https://errata.build.resf.org/RLSA-2026:8472
-
Rocky Linux Security Advisory RLSA-2026:8474 vom 2026-04-19
https://errata.build.resf.org/RLSA-2026:8474
-
Rocky Linux Security Advisory RLSA-2026:8475 vom 2026-04-18
https://errata.build.resf.org/RLSA-2026:8475
-
Oracle Linux Security Advisory ELSA-2026-8475 vom 2026-04-19
http://linux.oracle.com/errata/ELSA-2026-8475.html
-
Oracle Linux Security Advisory ELSA-2026-8468 vom 2026-04-20
https://linux.oracle.com/errata/ELSA-2026-8468.html
-
Oracle Linux Security Advisory ELSA-2026-8469 vom 2026-04-20
https://linux.oracle.com/errata/ELSA-2026-8469.html
-
Fedora Security Advisory FEDORA-2026-A1302C450C vom 2026-04-21
https://bodhi.fedoraproject.org/updates/FEDORA-2026-a1302c450c
-
Fedora Security Advisory FEDORA-2026-AC43E01AF9 vom 2026-04-21
https://bodhi.fedoraproject.org/updates/FEDORA-2026-ac43e01af9
-
Fedora Security Advisory FEDORA-2026-AD17A2DB6C vom 2026-04-21
https://bodhi.fedoraproject.org/updates/FEDORA-2026-ad17a2db6c
-
Fedora Security Advisory FEDORA-2026-E1D2833798 vom 2026-04-21
https://bodhi.fedoraproject.org/updates/FEDORA-2026-e1d2833798
-
Fedora Security Advisory FEDORA-2026-EADD724963 vom 2026-04-21
https://bodhi.fedoraproject.org/updates/FEDORA-2026-eadd724963
-
Fedora Security Advisory FEDORA-2026-EDCA75E401 vom 2026-04-21
https://bodhi.fedoraproject.org/updates/FEDORA-2026-edca75e401
-
Fedora Security Advisory FEDORA-2026-FC2112CDD4 vom 2026-04-21
https://bodhi.fedoraproject.org/updates/FEDORA-2026-fc2112cdd4
-
Fedora Security Advisory FEDORA-2026-02B2A30C02 vom 2026-04-21
https://bodhi.fedoraproject.org/updates/FEDORA-2026-02b2a30c02
-
Fedora Security Advisory FEDORA-2026-97FBAAEF10 vom 2026-04-21
https://bodhi.fedoraproject.org/updates/FEDORA-2026-97fbaaef10
-
Red Hat Security Advisory RHSA-2026:9077 vom 2026-04-27
https://access.redhat.com/errata/RHSA-2026:9077
-
Ubuntu Security Notice USN-8216-1 vom 2026-04-28
https://ubuntu.com/security/notices/USN-8216-1
-
Red Hat Security Advisory RHSA-2026:13283 vom 2026-05-04
https://access.redhat.com/errata/RHSA-2026:13283
-
Red Hat Security Advisory RHSA-2026:13281 vom 2026-05-04
https://access.redhat.com/errata/RHSA-2026:13281
-
Red Hat Security Advisory RHSA-2026:13280 vom 2026-05-04
https://access.redhat.com/errata/RHSA-2026:13280
-
Red Hat Security Advisory RHSA-2026:13282 vom 2026-05-04
https://access.redhat.com/errata/RHSA-2026:13282
-
Red Hat Security Advisory RHSA-2026:13693 vom 2026-05-05
https://access.redhat.com/errata/RHSA-2026:13693
-
Hitachi Vulnerability Information HITACHI-SEC-2026-311 vom 2026-05-27
https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/04.html