Yu5K3

**Name of the Vulnerable Software and Affected Versions** Azure DevOps Server (affected versions not specified) Team Foundation Server (affected versions not specified) **Description** The vulnerability is related to the deserialization mechanism in Azure DevOps Server, specifically in the MachinePropertyBag class. It allows an attacker to execute arbitrary code due to insufficient validation of untrusted data. This issue can lead to local privilege escalation. **Recommendations** For Azure DevOps Server, consider restricting access to the deserialization mechanism in the MachinePropertyBag class until a patch is available. For Team Foundation Server, restrict access to potentially vulnerable components to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.