dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability was found in .NET. This flaw allows an attacker to load a specially crafted file in .NET...

Microsoft Visual Studio 安全漏洞

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools from Microsoft Corporation USA that includes most of the tools needed throughout the software lifecycle. A security vulnerability exists in Microsoft Visual Studio. An attacker cou...

Microsoft Visual Studio和Microsoft .NET 安全漏洞

Microsoft Visual Studio and Microsoft .NET are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...

PT-2025-1111

Name of the Vulnerable Software and Affected Versions .NET and Visual Studio affected versions not specified Description The issue is related to a buffer overflow in dynamic memory, which can allow a remote attacker to execute arbitrary code. Recommendations At the moment, there is no information...

PT-2025-1209

Name of the Vulnerable Software and Affected Versions .NET versions prior to the version with Diasymreader.dll 14.8.9294.0 .NET Framework versions prior to the version with Mscorlib.dll 4.8.4775.0 Visual Studio versions prior to the version with updated Diasymreader.dll and Mscorlib.dll Descripti...

PT-2025-1208 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient access control in Microsoft Visual Studio, which could allow an attacker to elevate their privileges. Recommendations: At the moment,...

Security Updates for Microsoft Visual Studio 2022 17.6 / 17.8 / 17.10 Products (January 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - An undisclosed .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability CVE-2025-21176 - An undisclosed Visual Studio Remote Code Execution...

Security Updates for Microsoft Visual Studio 2022 17.12 Products (January 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - An undisclosed .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability CVE-2025-21176 - An undisclosed Visual Studio Remote Code Execution...

Security Updates for Microsoft Visual Studio 2019 16.11 / 2017 15.9 Products (January 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - An undisclosed .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability CVE-2025-21176 - An undisclosed Visual Studio Remote Code Execution...

Microsoft Visual Studio 访问控制错误漏洞

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete set of development tools that includes most of the tools needed throughout the software lifecycle. A security vulnerability exists in Microsoft Visual Studio. An attacker can exploit the...

PT-2025-5624 · Undefined · Undefined

@BleepinComputer @LawrenceAbrams Please note there is a typo on the related Visual Studio 17.12.4 release notes: https://t.co/Wd5b44oh6y "Carriage-return character in remote URL allows malicious repository to leak credentials CVE-2025-50338" should be "CVE-2024-50338" https://t.co/OXgtTiyqyK...

PT-2025-1101

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description The issue is related to a privilege elevation problem in the .NET platform, which is also associated with Microsoft Visual Studio. It involves the creation of a temporary file in a directory wit...

PT-2025-1106 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to a remote code execution vulnerability in Visual Studio. It involves a memory reading vulnerability that allows an out-of-bounds memory read. Exploitation of th...

Microsoft .NET 安全漏洞

Microsoft .NET is a software framework from Microsoft Corporation USA dedicated to agile software development, rapid application development, platform-independence, and web transparency. A security vulnerability exists in Microsoft .NET. An attacker could exploit the vulnerability to elevate...

Microsoft .NET、Microsoft .NET Framework和Microsoft Visual Studio 安全漏洞

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools, and Microsoft .NET Framework is a comprehensive and consistent programming model and a development platform for building applications for Windows, Windows Store, Windows Phone,...

PT-2025-1153

Name of the Vulnerable Software and Affected Versions Microsoft .NET affected versions not specified Microsoft Visual Studio affected versions not specified Description The issue is related to a buffer overflow in dynamic memory, which can be exploited by a remote attacker to execute arbitrary...

CVE-2025-22806

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Modernaweb Studio Black Widgets For Elementor black-widgets allows DOM-Based XSS.This issue affects Black Widgets For Elementor: from n/a through = 1.3.8...

CVE-2025-22806

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Modernaweb Studio Black Widgets For Elementor allows DOM-Based XSS.This issue affects Black Widgets For Elementor: from n/a through 1.3.8...

CVE-2025-22806

CVE-2025-22806 affects Black Widgets For Elementor. Root cause: DOM-Based XSS due to improper input neutralization during web page generation; affected versions n/a–1.3.8. Wordfence indicates the issue has been patched.

CVE-2025-22503

Cross-Site Request Forgery CSRF vulnerability in digitalzoomstudio Admin debug wordpress – enable debug dzs-enable-debug allows Cross Site Request Forgery.This issue affects Admin debug wordpress – enable debug: from n/a through = 1.0.13...