KLA20040 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Microsoft Windows Sysmon can be exploited remotely to gain privileges.
2. An information disclosure vulnerability in .NET Framework can be exploited remotely to obtain sensitive information.
3. A remote code execution vulnerability in Visual Studio can be exploited remotely to execute arbitrary code.
4. An information disclosure vulnerability in Git can be exploited remotely to obtain sensitive information.

Original advisories

CVE-2022-41120

CVE-2022-41064

CVE-2022-41119

CVE-2022-39253

Exploitation

Public exploits exist for this vulnerability.

Related products

Microsoft-.NET-Framework

Microsoft-Visual-Studio

Microsoft-Windows

CVE list

CVE-2022-41120 critical

CVE-2022-41064 high

CVE-2022-41119 critical

CVE-2022-39253 high

KB list

5020690

5020687

5020678

5020695

5020691

5020685

5020681

5020801

5020686

5019970

5020694

5020679

5020614

5020622

5020680

5020689

5020688

5019964

5020692

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• Windows SysmonMicrosoft .NET Framework 4.6.2Microsoft Visual Studio 2022 version 17.2Microsoft .NET Framework 4.8Nuget 2.1.2Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)Microsoft .NET Framework 4.7.2Nuget 4.8.5Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2Microsoft Visual Studio 2022 version 17.0Microsoft Visual Studio 2022 version 17.3Microsoft .NET Framework 4.8.1