[UPDATE] [hoch] Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-10-07 11:59 UTC
Importiert: 2026-10-09 10:15 UTC
CVSS: 9.6
Quelle-ID: cert_bund
uid_hash: 59389cdd20e3433d89a45a099fe3291c4191edf13fc2503f99d51766405003b7

CERT-Bund (BSI)

Inhalt

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Entwicklerwerkzeugen ausnutzen, um seine Privilegien zu erhöhen, um Sicherheitsmechanismen zu umgehen, sowie Informationen zu manipulieren oder offenzulegen.

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	Veroeffentlicht (CVE.org)
CVE-2026-57099	CRITICAL	9.6	HIGH	7.5	2026-09-08
CVE-2026-58649	CRITICAL	9.6	MEDIUM	6.5	2026-09-08
CVE-2026-69304	CRITICAL	9.6	MEDIUM	5.9	2026-09-08
CVE-2026-69439	CRITICAL	9.6	HIGH	8.8	2026-09-08
CVE-2026-69522	CRITICAL	9.6	HIGH	8.8	2026-09-08
CVE-2026-69805	CRITICAL	9.6	HIGH	7.5	2026-09-08
CVE-2026-69806	CRITICAL	9.6	HIGH	7	2026-09-08
CVE-2026-70334	CRITICAL	9.6	HIGH	7.8	2026-09-08
CVE-2026-71328	CRITICAL	9.6	HIGH	8.8	2026-09-08
CVE-2026-77906	CRITICAL	9.6	HIGH	8.8	2026-09-08
CVE-2026-77907	CRITICAL	9.6	HIGH	8.8	2026-09-08
CVE-2026-78461	CRITICAL	9.6	HIGH	7.4	2026-09-08
CVE-2026-78462	CRITICAL	9.6	HIGH	8.8	2026-09-08
CVE-2026-81356	CRITICAL	9.6	HIGH	8.2	2026-09-08
CVE-2026-81357	CRITICAL	9.6	HIGH	8.2	2026-09-08
CVE-2026-81376	CRITICAL	9.6	CRITICAL	9.6	2026-09-08
CVE-2026-81377	CRITICAL	9.6	MEDIUM	6.5	2026-09-08
CVE-2026-81378	CRITICAL	9.6	HIGH	8.2	2026-09-08
CVE-2026-81379	CRITICAL	9.6	HIGH	8.2	2026-09-08
CVE-2026-81380	CRITICAL	9.6	MEDIUM	5.3	2026-09-08
CVE-2026-81381	CRITICAL	9.6	MEDIUM	6.5	2026-09-08
CVE-2026-81383	CRITICAL	9.6	HIGH	7.4	2026-09-08

Externe Referenzen

Bezeichnung	Typ	CVE	Quelle
Red Hat Security Advisory RHSA-2026:67524 vom 2026-09-15	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:67525 vom 2026-09-15	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:67528 vom 2026-09-15	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:67530 vom 2026-09-15	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:67613 vom 2026-09-16	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:67614 vom 2026-09-16	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:68233 vom 2026-09-16	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:68316 vom 2026-09-17	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:68676 vom 2026-09-17	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:74947 vom 2026-10-02	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:74950 vom 2026-10-02	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:76978 vom 2026-10-07	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:77004 vom 2026-10-07	VENDOR	-	wid_csaf
Fedora Security Advisory FEDORA-2026-04A0116777 vom 2026-09-14	EXTERNAL	-	wid_csaf
Fedora Security Advisory FEDORA-2026-0FA8C76E88 vom 2026-09-14	EXTERNAL	-	wid_csaf
Fedora Security Advisory FEDORA-2026-182712D480 vom 2026-09-14	EXTERNAL	-	wid_csaf
Fedora Security Advisory FEDORA-2026-9D80C37C0A vom 2026-09-14	EXTERNAL	-	wid_csaf
Fedora Security Advisory FEDORA-2026-A5C27E8727 vom 2026-09-14	EXTERNAL	-	wid_csaf
Fedora Security Advisory FEDORA-2026-D757A4044B vom 2026-09-14	EXTERNAL	-	wid_csaf
Fedora Security Advisory FEDORA-2026-FA6DE37202 vom 2026-09-14	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2026:67524 vom 2026-09-16	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2026:67525 vom 2026-09-16	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2026:67528 vom 2026-09-16	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2026:67530 vom 2026-09-16	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2026:67613 vom 2026-09-16	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2026:67614 vom 2026-09-16	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2026:68233 vom 2026-09-17	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2026:68316 vom 2026-09-17	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2026:68676 vom 2026-09-19	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2026-67524 vom 2026-09-16	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2026-67525 vom 2026-09-16	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2026-67528 vom 2026-09-16	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2026-67530 vom 2026-09-16	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2026-67613 vom 2026-09-16	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2026-67614 vom 2026-09-16	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2026-68233 vom 2026-09-18	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2026-68316 vom 2026-09-18	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2026-68676 vom 2026-09-18	EXTERNAL	-	wid_csaf
Microsoft Leitfaden für Sicherheitsupdates	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2025-70873	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-34182	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-57099	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-58649	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-69304	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-69439	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-69522	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-69805	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-69806	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-70334	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-71328	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-77906	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-77907	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-78461	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-78462	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-81356	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-81357	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-81376	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-81377	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-81378	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-81379	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-81380	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-81381	EXTERNAL	-	wid_csaf
Microsoft Security Advisory CVE-2026-81383	EXTERNAL	-	wid_csaf
Ubuntu Security Notice USN-8740-1 vom 2026-09-10	EXTERNAL	-	wid_csaf

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
CERT-Bund (BSI)	cert_bund	government_cert		-	de	https://wid.cert-bund.de/content/public/securityAdvisory/rss

Zurueck zur Eintrags-Liste