Visual Studio Elevation of Privilege Vulnerability

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...

PT-2025-10842 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to an uncontrolled search path element in Visual Studio, allowing an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is n...

CVE-2025-25296

Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's /projects/upload-example endpoint allows injection of arbitrary HTML through a GET request with an appropriately crafted labelconfig query parameter. By crafting a specially formatted XML label config with...

Lightning AI Studio Vulnerability Could've Allowed RCE via Hidden URL Parameter

Cybersecurity researchers have disclosed a critical security flaw in the Lightning AI Studio development platform that, if successfully exploited, could have allowed for remote code execution. The vulnerability, rated a CVSS score of 9.4, enables "attackers to potentially execute arbitrary comman...

ROS-20250128-04

Vulnerability of Microsoft .NET software platform and Microsoft software development tool Microsoft Visual Studio is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code Vulnerability in Microsoft .NET...

Remote Code Execution

Microsoft.NetCore.App.Runtime is vulnerable to Remote Code Execution. The vulnerability is due to improper handling of specially crafted files in Visual Studio, allowing attackers to exploit this weakness by loading malicious files to execute arbitrary code...

CVE-2025-21172

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2025-21172 .NET and Visual Studio Remote Code Execution Vulnerability

...

CVE-2025-21172 .NET and Visual Studio Remote Code Execution Vulnerability

...

CVE-2025-21172

CVE-2025-21172 is a Microsoft .NET/Visual Studio remote code execution vulnerability. The linked CVE record notes the root cause as an integer overflow and a heap-based overflow in msdia140.dll, yielding a high-impact remote code execution scenario over network; exploitation status is not detaile...

CVE-2025-21172

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2025-21176 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

...

Visual Studio Remote Code Execution Vulnerability

...

PT-2025-1153

Name of the Vulnerable Software and Affected Versions Microsoft .NET affected versions not specified Microsoft Visual Studio affected versions not specified Description The issue is related to a buffer overflow in dynamic memory, which can be exploited by a remote attacker to execute arbitrary...

Important: dotnet8.0

Issue Overview: .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-38229 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43483 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-43484 .NET and Visual Studio Denial of...

GHSA-8RXM-6783-QH55 Duplicate Advisory: .NET and Visual Studio Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6x36-qxmj-rv4p. This link is maintained to preserve external references. Original Description .NET and Visual Studio Remote Code Execution Vulnerability...

Microsoft Visual Studio和Microsoft .NET 安全漏洞

Microsoft Visual Studio and Microsoft .NET are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...

SAS Studio 安全漏洞

SAS Studio is a Web browser-based programming environment from SAS. A security vulnerability exists in SAS Studio version 9.4. A remote attacker could exploit the vulnerability to access internal files by manipulating the default path during file download...

CVE-2024-38229

.NET and Visual Studio Remote Code Execution Vulnerability...

Important: dotnet8.0

Issue Overview: .NET Core and Visual Studio Denial of Service Vulnerability CVE-2024-30105 .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-35264 .NET and Visual Studio Denial of Service Vulnerability CVE-2024-38095 Affected Packages: dotnet8.0 Issue Correction: Run dnf update...