22 matches found
CVE-2026-69439
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
.NET and Visual Studio Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
PT-2026-87468
Name of the Vulnerable Software and Affected Versions Microsoft.DiaSymReader.Native versions 17.10.0-beta1.24272.1 through 18.9.0-beta1.26405.1 Description A heap-based buffer overflow exists in .NET and Visual Studio, specifically within Microsoft.DiaSymReader.Native. This issue occurs due to an...
BIT-DOTNET-2025-26646 .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...
CVE-2025-30399
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network...
CVE-2025-26646
A flaw was found in .NET and Visual Studio. This vulnerability allows an attacker to use specially crafted input to spoof trusted content or identities, potentially misleading users or systems. This issue requires user interaction and limited privileges but can lead to unauthorized actions or...
CVE-2025-26646
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...
.NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...
GHSA-WMM6-PGP8-29HG Duplicate Advisory: .NET and Visual Studio Denial of Service Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6x36-qxmj-rv4p. This link is maintained to preserve external references. Original Description .NET and Visual Studio Denial of Service Vulnerability...
CVE-2024-43498
.NET and Visual Studio Remote Code Execution Vulnerability...
CVE-2024-43485
.NET and Visual Studio Denial of Service Vulnerability...
CVE-2024-38168
.NET and Visual Studio Denial of Service Vulnerability...
CVE-2024-38168
CVE-2024-38168 is a Windows-only Denial of Service vulnerability in .NET and ASP.NET/HTTP.sys affecting .NET 8.0 runtimes prior to 8.0.8 (and related ASP.NET packages). The issue arises when an unauthenticated client sends requests that trigger the HTTP.sys DoS condition. Microsoft’s advisory lis...
CVE-2024-38167
CVE-2024-38167 is a .NET 8.0 information disclosure vulnerability in the TlsStream path. Connected advisories confirm affected software are .NET 8 runtimes/SDKs and related packages; vulnerable versions are 8.0.0 through 8.0.7, with a patched release at 8.0.8 (and related OS/packaged updates). Th...
BIT-DOTNET-2023-32032 .NET and Visual Studio Elevation of Privilege Vulnerability
.NET and Visual Studio Elevation of Privilege Vulnerability...
BIT-DOTNET-SDK-2023-36796 Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability...
CVE-2023-38180
.NET and Visual Studio Denial of Service Vulnerability...
CVE-2023-38180
.NET and Visual Studio Denial of Service Vulnerability...
Patch Tuesday - February 2023
It’s Patch Tuesday again. Microsoft is addressing fewer individual vulnerabilities this month than last, but there’s still plenty to keep admins and defenders occupied. Three zero-day vulnerabilities are vying for your attention today: a lone Microsoft Publisher vulnerability as well as a couple...