SQL Server Management Studio Code Execution

The vulnerability of the SQL Server Management Studio SSMS and the Visual Studio Tools for Applications VSTA environment used in Microsoft Visual Studio development tools is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary co...

CVE-2026-103572

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

EUVD-2026-99027

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-103572

A code injection vulnerability exists in Visual Studio Tools for Applications and SQL Server Management Studio . Due to improper control of code generation, an unauthorized attacker can execute arbitrary code over a network. This vulnerability has a CVSS 3.1 score of 8.8 and is reported to have a...

Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

PT-2026-118111

Уязвимость среды для администрирования баз данных SQL Server Management Studio SSMS и набора инструментов Visual Studio Tools for Applications VSTA средства разработки программного обеспечения Microsoft Visual Studio связана с неверным управлением генерацией кода. Эксплуатация уязвимости может...

CVE-2026-103572: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

Microsoft Visual Studio: CVE-2026-103572: Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

PT-2026-111805

Name of the Vulnerable Software and Affected Versions Visual Studio Tools for Applications affected versions not specified SQL Server Management Studio affected versions not specified Visual Studio Copilot extension affected versions not specified Description Improper control of code generation...

Microsoft SQL Server Management Studio Privilege Escalation

The vulnerability of the Microsoft SQL Server Management Studio SSMS management tool is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

EUVD-2025-10834

Malicious code in bioql PyPI...

CVE-2019-1313

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1376...

CVE-2025-29803

Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally...

CVE-2025-29803

Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally...

CVE-2025-29803 Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability

...

CVE-2025-29803

CVE-2025-29803 affects Microsoft Visual Studio Tools for Applications (VSTA) 2019 (before 16.0.35907.0) and VSTA 2022 (before 17.0.35906.0) and SQL Server Management Studio. The vulnerability is due to an uncontrolled search path element, enabling an authorized attacker to escalate privileges loc...

CVE-2025-29803 Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability

...

CVE-2025-29803: Uncontrolled Search Path Element

Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally...

Security Updates for SQL Server Management Studio (April 2025)

The SQL Server Management Studio installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2025-29803 %NASLMINLEVEL 70300 C Tenab...

Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability

Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally...