Studio Security Vulnerabilities

CVE-2021-34529

Visual Studio Code Remote Code Execution...

CVE-2021-34528

Visual Studio Code Remote Code Execution...

CVE-2021-34479

Microsoft Visual Studio Spoofing...

CVE-2021-35516

When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz...

CVE-2021-36090

When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip...

CVE-2021-35515

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz...

CVE-2021-35517

When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar...

CVE-2021-35448

Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using the Image Transfer Folder feature to navigate to cmd.exe. It binds to local ports to listen for incoming...

CVE-2021-23394

The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as...

CVE-2021-31938

Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege...

CVE-2021-31957

ASP.NET Core Denial of Service...

CVE-2021-31211

Visual Studio Code Remote Code Execution...

CVE-2021-31213

Visual Studio Code Remote Containers Extension Remote Code Execution...

CVE-2021-31214

Visual Studio Code Remote Code Execution...

CVE-2021-31204

.NET and Visual Studio Elevation of Privilege...

CVE-2021-27068

Visual Studio Remote Code Execution...

CVE-2021-31434

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31436

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31437

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31435

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31438

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31433

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-35542

Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS...

CVE-2021-28473

Visual Studio Code Remote Code Execution...

CVE-2021-28471

Remote Development Extension for Visual Studio Code Remote Code Execution...

CVE-2021-28475

Visual Studio Code Remote Code Execution...

CVE-2021-28477

Visual Studio Code Remote Code Execution...

CVE-2021-28470

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution...

CVE-2021-28472

Visual Studio Code Maven for Java Extension Remote Code Execution...

CVE-2021-28469

Visual Studio Code Remote Code Execution...

CVE-2021-28448

Visual Studio Code Kubernetes Tools Remote Code Execution...

CVE-2021-28457

Visual Studio Code Remote Code Execution...

CVE-2021-28322

Diagnostics Hub Standard Collector Service Elevation of Privilege...

CVE-2021-28313

Diagnostics Hub Standard Collector Service Elevation of Privilege...

CVE-2021-28321

Diagnostics Hub Standard Collector Service Elevation of Privilege...

CVE-2021-27064

Visual Studio Installer Elevation of Privilege...

CVE-2021-29425

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path...

CVE-2021-3146

The Dolby Audio X2 (DAX2) API service before 0.8.8.90 on Windows allows local users to gain...

CVE-2021-21409

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that enables request smuggling. The...

CVE-2021-28967

The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration...

CVE-2021-20218

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client copy command to extract files outside the working path. The highest threat from this vulnerability is to integrity and.....

CVE-2021-27084

Visual Studio Code Java Extension Pack Remote Code Execution...

CVE-2021-27081

Visual Studio Code ESLint Extension Remote Code Execution...

CVE-2021-27083

Remote Development Extension for Visual Studio Code Remote Code Execution...

CVE-2021-27082

Quantum Development Kit for Visual Studio Code Remote Code Execution...

CVE-2021-27060

Visual Studio Code Remote Code Execution...

CVE-2021-22681

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730,...

CVE-2021-27225

In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have coding permissions) to read and overwrite notebooks in projects that they are not authorized to...

CVE-2021-26700

Visual Studio Code npm-script Extension Remote Code Execution...

CVE-2021-26701

.NET Core Remote Code Execution...