Microsoft Developer Tools: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 27

• High 8.8
  CVE-2026-59113

  Visual Studio Code Remote Code Execution Vulnerability

  Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  Microsoft Visual Studio Code
  Aug 11, 2026
• High 8.8
  CVE-2026-62872

  .NET Framework Elevation of Privilege Vulnerability

  Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 3.5 AND 4.8
  Aug 11, 2026
• High 8.8
  CVE-2026-69320

  Visual Studio Code Remote Code Execution Vulnerability

  Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  Microsoft Visual Studio Code
  Aug 11, 2026
• High 8.8
  CVE-2026-70336

  Visual Studio Code Remote Code Execution Vulnerability

  Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  Microsoft Visual Studio Code
  Aug 11, 2026
• High 8.8
  CVE-2026-70337

  Microsoft PowerShell Remote Code Execution Vulnerability

  Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.

  Microsoft PowerShell 7.4 PowerShell 7.5 PowerShell 7.6 Alpine
  Aug 11, 2026
• High 8.2
  CVE-2026-69306

  Visual Studio Code Security Feature Bypass Vulnerability

  Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  Microsoft Visual Studio Code
  Aug 11, 2026
• High 7.8
  CVE-2026-54981

  Visual Studio Code Python Extension Security Feature Bypass Vulnerability

  Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.

  Microsoft Python extension for Visual Studio Code
  Aug 11, 2026
• High 7.8
  CVE-2026-58641

  .NET Elevation of Privilege Vulnerability

  Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

  Microsoft SkiaSharp
  Aug 11, 2026
• High 7.8
  CVE-2026-58650

  Visual Studio Code Security Feature Bypass Vulnerability

  Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  Microsoft Visual Studio Code
  Aug 11, 2026
• High 7.8
  CVE-2026-62871

  .NET Elevation of Privilege Vulnerability

  Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 8.0 runtime Ubuntu Alpine NuGet
  Aug 11, 2026
• High 7.8
  CVE-2026-62886

  .NET Elevation of Privilege Vulnerability

  Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine NuGet
  Aug 11, 2026
• High 7.8
  CVE-2026-62909

  .NET Elevation of Privilege Vulnerability

  Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 8.0 runtime Ubuntu Alpine Wolfi NuGet
  Aug 11, 2026
• High 7.8
  CVE-2026-65810

  .NET Framework Elevation of Privilege Vulnerability

  Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.

  Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2
  Aug 11, 2026
• High 7.8
  CVE-2026-69278

  Visual Studio Code Security Feature Bypass Vulnerability

  Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  Microsoft Visual Studio Code
  Aug 11, 2026
• High 7.8
  CVE-2026-70335

  GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability

  Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

  Microsoft Visual Studio Code
  Aug 11, 2026
• High 7.8
  CVE-2026-70338

  Microsoft PowerShell Security Feature Bypass Vulnerability

  Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

  Microsoft PowerShell 7.4 PowerShell 7.5 PowerShell 7.6 Alpine
  Aug 11, 2026
• High 7.8
  CVE-2026-70354

  .NET Core Remote Code Execution Vulnerability

  Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine NuGet
  Aug 11, 2026
• High 7.5
  CVE-2026-62898

  Microsoft QUIC Information Disclosure Vulnerability

  Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 8.0 runtime Ubuntu Alpine NuGet
  Aug 11, 2026
• High 7.5
  CVE-2026-62901

  .NET Denial of Service Vulnerability

  Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 8.0 runtime Ubuntu Alpine Wolfi NuGet
  Aug 11, 2026
• High 7.4
  CVE-2026-58612

  PowerShell Information Disclosure Vulnerability

  Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.

  Microsoft PowerShell 7.4 PowerShell 7.5 PowerShell 7.6 Alpine
  Aug 11, 2026
• High 7.3
  CVE-2026-59119

  PowerShell Elevation of Privilege Vulnerability

  Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

  Microsoft PowerShell 7.4 PowerShell 7.5 PowerShell 7.6 Alpine
  Aug 11, 2026
• High 7.1
  CVE-2026-65675

  CoPilot Chat Security Feature Bypass Vulnerability

  No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.

  Microsoft Microsoft Visual Studio Code CoPilot Chat Extension
  Aug 11, 2026
• High 7.0
  CVE-2026-62897

  .NET Framework Remote Code Execution Vulnerability

  Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine NuGet
  Aug 11, 2026
• Medium 6.5
  CVE-2026-47285

  Visual Studio Code Information Disclosure Vulnerability

  Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  Microsoft Visual Studio Code
  Aug 11, 2026
• Medium 6.5
  CVE-2026-62902

  .NET Information Disclosure Vulnerability

  Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 8.0 runtime Ubuntu Alpine NuGet
  Aug 11, 2026
• Medium 5.9
  CVE-2026-62899

  .NET Security Feature Bypass Vulnerability

  Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 8.0 runtime Ubuntu Alpine Wolfi NuGet
  Aug 11, 2026
• Medium 5.9
  CVE-2026-62900

  .NET Information Disclosure Vulnerability

  Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 8.0 runtime Ubuntu Alpine Wolfi NuGet
  Aug 11, 2026

Revision history

1. 2026-11-11 #9

   Neue Updates von Red Hat aufgenommen

2. 2026-11-01 #8

   Neue Updates von Red Hat und Rocky Enterprise Software Foundation aufgenommen

3. 2026-09-24 #7

   Neue Updates von HITACHI aufgenommen

4. 2026-08-23 #6

   Neue Updates von Red Hat aufgenommen

5. 2026-08-18 #5

   Neue Updates von Rocky Enterprise Software Foundation, Oracle Linux und Ubuntu aufgenommen

6. 2026-08-17 #4

   Neue Updates von Red Hat aufgenommen

7. 2026-08-16 #3

   Neue Updates von Rocky Enterprise Software Foundation, Red Hat und Oracle Linux aufgenommen

8. 2026-08-13 #2

   Neue Updates von Fedora, Oracle Linux, Red Hat und Rocky Enterprise Software Foundation aufgenommen

9. 2026-08-11 #1

   Initiale Fassung

References

• Microsoft Leitfaden für Sicherheitsupdates
  https://msrc.microsoft.com/update-guide/
• Microsoft Security Advisory CVE-2026-70335
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70335
• Microsoft Security Advisory CVE-2026-69306
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69306
• Microsoft Security Advisory CVE-2026-69278
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69278
• Microsoft Security Advisory CVE-2026-70336
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70336
• Microsoft Security Advisory CVE-2026-47285
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47285
• Microsoft Security Advisory CVE-2026-69320
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69320
• Microsoft Security Advisory CVE-2026-59113
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59113
• Microsoft Security Advisory CVE-2026-58650
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58650
• Microsoft Security Advisory CVE-2026-65810
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65810
• Microsoft Security Advisory CVE-2026-62872
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62872
• Microsoft Security Advisory CVE-2026-70354
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70354
• Microsoft Security Advisory CVE-2026-62897
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62897
• Microsoft Security Advisory CVE-2026-54981
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54981
• Microsoft Security Advisory CVE-2026-59119
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59119
• Microsoft Security Advisory CVE-2026-58612
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58612
• Microsoft Security Advisory CVE-2026-70338
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70338
• Microsoft Security Advisory CVE-2026-70337
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70337
• Microsoft Security Advisory CVE-2026-62899
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62899
• Microsoft Security Advisory CVE-2026-58641
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58641
• Microsoft Security Advisory CVE-2026-62909
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62909
• Microsoft Security Advisory CVE-2026-62902
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62902
• Microsoft Security Advisory CVE-2026-62871
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62871
• Microsoft Security Advisory CVE-2026-62886
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62886
• Microsoft Security Advisory CVE-2026-62901
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62901
• Microsoft Security Advisory CVE-2026-62900
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62900
• Microsoft Security Advisory CVE-2026-62898
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62898
• Microsoft Security Advisory CVE-2026-65675
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65675
• Red Hat Security Advisory RHSA-2026:44914 vom 2026-08-12
  https://access.redhat.com/errata/RHSA-2026:44914
• Fedora Security Advisory FEDORA-2026-7CFD54A4C1 vom 2026-08-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-7cfd54a4c1
• Fedora Security Advisory FEDORA-2026-0DB5BF0AAE vom 2026-08-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-0db5bf0aae
• Fedora Security Advisory FEDORA-2026-8B4CB2340A vom 2026-08-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-8b4cb2340a
• Fedora Security Advisory FEDORA-2026-91C099294A vom 2026-08-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-91c099294a
• Fedora Security Advisory FEDORA-2026-9C8770DFFB vom 2026-08-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-9c8770dffb
• Fedora Security Advisory FEDORA-2026-1397D83D94 vom 2026-08-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-1397d83d94
• Oracle Linux Security Advisory ELSA-2026-54590 vom 2026-08-14
  https://linux.oracle.com/errata/ELSA-2026-54590.html
• Oracle Linux Security Advisory ELSA-2026-54541 vom 2026-08-14
  https://linux.oracle.com/errata/ELSA-2026-54541.html
• Red Hat Security Advisory RHSA-2026:54538 vom 2026-08-13
  https://access.redhat.com/errata/RHSA-2026:54538
• Red Hat Security Advisory RHSA-2026:54541 vom 2026-08-13
  https://access.redhat.com/errata/RHSA-2026:54541
• Red Hat Security Advisory RHSA-2026:54550 vom 2026-08-13
  https://access.redhat.com/errata/RHSA-2026:54550
• Red Hat Security Advisory RHSA-2026:54574 vom 2026-08-14
  https://access.redhat.com/errata/RHSA-2026:54574
• Red Hat Security Advisory RHSA-2026:54590 vom 2026-08-14
  https://access.redhat.com/errata/RHSA-2026:54590
• Rocky Linux Security Advisory RLSA-2026:54538 vom 2026-08-14
  https://errata.build.resf.org/RLSA-2026:54538
• Oracle Linux Security Advisory ELSA-2026-54574 vom 2026-08-14
  https://linux.oracle.com/errata/ELSA-2026-54574.html
• Oracle Linux Security Advisory ELSA-2026-54542 vom 2026-08-14
  https://linux.oracle.com/errata/ELSA-2026-54542.html
• Oracle Linux Security Advisory ELSA-2026-54538 vom 2026-08-14
  https://linux.oracle.com/errata/ELSA-2026-54538.html
• Rocky Linux Security Advisory RLSA-2026:54542 vom 2026-08-15
  https://errata.build.resf.org/RLSA-2026:54542
• Rocky Linux Security Advisory RLSA-2026:54550 vom 2026-08-15
  https://errata.build.resf.org/RLSA-2026:54550
• Rocky Linux Security Advisory RLSA-2026:54590 vom 2026-08-14
  https://errata.build.resf.org/RLSA-2026:54590
• Rocky Linux Security Advisory RLSA-2026:54541 vom 2026-08-14
  https://errata.build.resf.org/RLSA-2026:54541
• Rocky Linux Security Advisory RLSA-2026:54574 vom 2026-08-15
  https://errata.build.resf.org/RLSA-2026:54574
• Red Hat Security Advisory RHSA-2026:55142 vom 2026-08-15
  https://access.redhat.com/errata/RHSA-2026:55142
• Red Hat Security Advisory RHSA-2026:55405 vom 2026-08-16
  https://access.redhat.com/errata/RHSA-2026:55405
• Oracle Linux Security Advisory ELSA-2026-54550 vom 2026-08-15
  https://oss.oracle.com/pipermail/el-errata/2026-August/021606.html
• Red Hat Security Advisory RHSA-2026:55857 vom 2026-08-18
  https://access.redhat.com/errata/RHSA-2026:55857
• Red Hat Security Advisory RHSA-2026:55858 vom 2026-08-18
  https://access.redhat.com/errata/RHSA-2026:55858
• Red Hat Security Advisory RHSA-2026:55856 vom 2026-08-18
  https://access.redhat.com/errata/RHSA-2026:55856
• Rocky Linux Security Advisory RLSA-2026:55856 vom 2026-08-19
  https://errata.build.resf.org/RLSA-2026:55856
• Oracle Linux Security Advisory ELSA-2026-55856 vom 2026-08-18
  https://linux.oracle.com/errata/ELSA-2026-55856.html
• Rocky Linux Security Advisory RLSA-2026:55858 vom 2026-08-18
  https://errata.build.resf.org/RLSA-2026:55858
• Ubuntu Security Notice USN-8641-1 vom 2026-08-19
  https://ubuntu.com/security/notices/USN-8641-1
• Rocky Linux Security Advisory RLSA-2026:55857 vom 2026-08-19
  https://errata.build.resf.org/RLSA-2026:55857
• Oracle Linux Security Advisory ELSA-2026-55858 vom 2026-08-18
  https://oss.oracle.com/pipermail/el-errata/2026-August/021633.html
• Oracle Linux Security Advisory ELSA-2026-55857 vom 2026-08-19
  https://linux.oracle.com/errata/ELSA-2026-55857.html
• Red Hat Security Advisory RHSA-2026:58566 vom 2026-08-24
  https://access.redhat.com/errata/RHSA-2026:58566
• Red Hat Security Advisory RHSA-2026:58567 vom 2026-08-24
  https://access.redhat.com/errata/RHSA-2026:58567
• Red Hat Security Advisory RHSA-2026:58570 vom 2026-08-24
  https://access.redhat.com/errata/RHSA-2026:58570
• Red Hat Security Advisory RHSA-2026:58568 vom 2026-08-24
  https://access.redhat.com/errata/RHSA-2026:58568
• Red Hat Security Advisory RHSA-2026:58569 vom 2026-08-24
  https://access.redhat.com/errata/RHSA-2026:58569
• Hitachi Vulnerability Information HITACHI-SEC-2026-317 vom 2026-09-25
  https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/08.html
• Red Hat Security Advisory RHSA-2026:92511 vom 2026-10-30
  https://access.redhat.com/errata/RHSA-2026:92511
• Rocky Linux Security Advisory RLSA-2026:92511 vom 2026-10-31
  https://errata.build.resf.org/RLSA-2026:92511
• Red Hat Security Advisory RHSA-2026:99173 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99173
• Red Hat Security Advisory RHSA-2026:98571 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98571