Microsoft Developer Tools: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 10

• High 8.8
  CVE-2026-41094

  Microsoft Data Formulator Remote Code Execution Vulnerability

  Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft Data Formulator
  May 12, 2026
• High 8.8
  CVE-2026-41109

  GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

  Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network.

  Microsoft Visual Studio Code
  May 12, 2026
• High 8.8
  CVE-2026-41613

  Visual Studio Code Elevation of Privilege Vulnerability

  Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

  Microsoft Visual Studio Code
  May 12, 2026
• High 7.8
  CVE-2026-41611

  Visual Studio Code Remote Code Execution Vulnerability

  Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally.

  Microsoft Visual Studio Code
  May 12, 2026
• High 7.5
  CVE-2026-42899

  ASP.NET Core Denial of Service Vulnerability

  Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  Microsoft .NET 8.0 .NET 9.0 .NET 10.0 Ubuntu Alpine Wolfi NuGet
  May 12, 2026
• High 7.3
  CVE-2026-32177

  .NET Elevation of Privilege Vulnerability

  Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine
  May 12, 2026
• High 7.3
  CVE-2026-35433

  .NET Elevation of Privilege Vulnerability

  Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

  Microsoft Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 4.8 Ubuntu Alpine NuGet
  May 12, 2026
• Medium 6.3
  CVE-2026-41610

  Visual Studio Code Security Feature Bypass Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  Microsoft Visual Studio Code
  May 12, 2026
• Medium 5.5
  CVE-2026-41612

  Visual Studio Code Information Disclosure Vulnerability

  Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally.

  Microsoft Visual Studio Code - Live Preview extension
  May 12, 2026
• Medium 4.3
  CVE-2026-32175

  .NET Core Tampering Vulnerability

  A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker…

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft Visual Studio 2022 version 17.12 .NET 8.0 Ubuntu Alpine NuGet
  May 12, 2026

Revision history

1. 2026-07-27 #13

   Neue Updates von Oracle Linux aufgenommen

2. 2026-07-19 #12

   Neue Updates von Oracle Linux aufgenommen

3. 2026-06-28 #11

   Neue Updates von Oracle Linux aufgenommen

4. 2026-06-10 #10

   Neue Updates von Red Hat aufgenommen

5. 2026-06-07 #9

   Neue Updates von Red Hat und Rocky Enterprise Software Foundation aufgenommen

6. 2026-06-04 #8

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

7. 2026-06-01 #7

   Neue Updates von Red Hat aufgenommen

8. 2026-05-31 #6

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

9. 2026-05-28 #5

   Neue Updates von Rocky Enterprise Software Foundation, Oracle Linux und Red Hat aufgenommen

10. 2026-05-27 #4

    Neue Updates von Oracle Linux und Red Hat aufgenommen

11. 2026-05-26 #3

    Neue Updates von Red Hat aufgenommen

12. 2026-05-14 #2

    Neue Updates von Fedora aufgenommen

13. 2026-05-12 #1

    Initiale Fassung

References

• Microsoft Leitfaden für Sicherheitsupdates
  https://msrc.microsoft.com/update-guide/
• Fedora Security Advisory FEDORA-2026-85758358FF vom 2026-05-14
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-85758358ff
• Fedora Security Advisory FEDORA-2026-B1A2F623E7 vom 2026-05-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-b1a2f623e7
• Fedora Security Advisory FEDORA-2026-9C63A012B9 vom 2026-05-14
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-9c63a012b9
• Fedora Security Advisory FEDORA-2026-8923EF586F vom 2026-05-14
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-8923ef586f
• Fedora Security Advisory FEDORA-2026-EF4291BD79 vom 2026-05-14
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-ef4291bd79
• Fedora Security Advisory FEDORA-2026-0D598AFBF9 vom 2026-05-14
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-0d598afbf9
• Fedora Security Advisory FEDORA-2026-223F4839FC vom 2026-05-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-223f4839fc
• Fedora Security Advisory FEDORA-2026-3E509B1444 vom 2026-05-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e509b1444
• Fedora Security Advisory FEDORA-2026-6013769170 vom 2026-05-14
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-6013769170
• Red Hat Security Advisory RHSA-2026:21286 vom 2026-05-27
  https://access.redhat.com/errata/RHSA-2026:21286
• Red Hat Security Advisory RHSA-2026:21293 vom 2026-05-27
  https://access.redhat.com/errata/RHSA-2026:21293
• Red Hat Security Advisory RHSA-2026:21291 vom 2026-05-27
  https://access.redhat.com/errata/RHSA-2026:21291
• Red Hat Security Advisory RHSA-2026:21295 vom 2026-05-27
  https://access.redhat.com/errata/RHSA-2026:21295
• Red Hat Security Advisory RHSA-2026:21296 vom 2026-05-27
  https://access.redhat.com/errata/RHSA-2026:21296
• Oracle Linux Security Advisory ELSA-2026-21295 vom 2026-05-28
  https://linux.oracle.com/errata/ELSA-2026-21295.html
• Red Hat Security Advisory RHSA-2026:21294 vom 2026-05-27
  https://access.redhat.com/errata/RHSA-2026:21294
• Red Hat Security Advisory RHSA-2026:21297 vom 2026-05-27
  https://access.redhat.com/errata/RHSA-2026:21297
• Oracle Linux Security Advisory ELSA-2026-21294 vom 2026-05-28
  https://linux.oracle.com/errata/ELSA-2026-21294.html
• Rocky Linux Security Advisory RLSA-2026:21291 vom 2026-05-29
  https://errata.build.resf.org/RLSA-2026:21291
• Oracle Linux Security Advisory ELSA-2026-21291 vom 2026-05-28
  https://linux.oracle.com/errata/ELSA-2026-21291.html
• Rocky Linux Security Advisory RLSA-2026:21294 vom 2026-05-29
  https://errata.build.resf.org/RLSA-2026:21294
• Red Hat Security Advisory RHSA-2026:21754 vom 2026-05-28
  https://access.redhat.com/errata/RHSA-2026:21754
• Rocky Linux Security Advisory RLSA-2026:21295 vom 2026-05-29
  https://errata.build.resf.org/RLSA-2026:21295
• Rocky Linux Security Advisory RLSA-2026:21296 vom 2026-05-30
  https://errata.build.resf.org/RLSA-2026:21296
• Rocky Linux Security Advisory RLSA-2026:21293 vom 2026-05-30
  https://errata.build.resf.org/RLSA-2026:21293
• Rocky Linux Security Advisory RLSA-2026:21297 vom 2026-05-30
  https://errata.build.resf.org/RLSA-2026:21297
• Red Hat Security Advisory RHSA-2026:22145 vom 2026-06-01
  https://access.redhat.com/errata/RHSA-2026:22145
• Rocky Linux Security Advisory RLSA-2026:21286 vom 2026-06-04
  https://errata.build.resf.org/RLSA-2026:21286
• Rocky Linux Security Advisory RLSA-2026:21754 vom 2026-06-04
  https://errata.build.resf.org/RLSA-2026:21754
• Red Hat Security Advisory RHSA-2026:24333 vom 2026-06-08
  https://access.redhat.com/errata/RHSA-2026:24333
• Red Hat Security Advisory RHSA-2026:24335 vom 2026-06-08
  https://access.redhat.com/errata/RHSA-2026:24335
• Red Hat Security Advisory RHSA-2026:24334 vom 2026-06-08
  https://access.redhat.com/errata/RHSA-2026:24334
• Red Hat Security Advisory RHSA-2026:24332 vom 2026-06-08
  https://access.redhat.com/errata/RHSA-2026:24332
• Rocky Linux Security Advisory RLSA-2026:22145 vom 2026-06-05
  https://errata.build.resf.org/RLSA-2026:22145
• Red Hat Security Advisory RHSA-2026:24336 vom 2026-06-08
  https://access.redhat.com/errata/RHSA-2026:24336
• Red Hat Security Advisory RHSA-2026:17527 vom 2026-06-10
  https://access.redhat.com/errata/RHSA-2026:17527
• Red Hat Security Advisory RHSA-2026:17682 vom 2026-06-10
  https://access.redhat.com/errata/RHSA-2026:17682
• Oracle Linux Security Advisory ELSA-2026-21296 vom 2026-06-27
  http://linux.oracle.com/errata/ELSA-2026-21296.html
• Oracle Linux Security Advisory ELSA-2026-21293 vom 2026-06-27
  http://linux.oracle.com/errata/ELSA-2026-21293.html
• Oracle Linux Security Advisory ELSA-2026-21297 vom 2026-06-27
  http://linux.oracle.com/errata/ELSA-2026-21297.html
• Oracle Linux Security Advisory ELSA-2026-22145 vom 2026-07-17
  https://linux.oracle.com/errata/ELSA-2026-22145.html
• Oracle Linux Security Advisory ELSA-2026-21754 vom 2026-07-17
  https://linux.oracle.com/errata/ELSA-2026-21754.html
• Oracle Linux Security Advisory ELSA-2026-21286 vom 2026-07-28
  http://linux.oracle.com/errata/ELSA-2026-21286.html