12316 matches found
PT-2026-95056
A new version of the greentic-setup crate was published with a variant of the PolinRider malware included that would fire when a project depending on greentic-setup was opened in Visual Studio Code. One malicious version was published on 2026-09-06, approximately 27 hours before removal. This cra...
ROS-20260907-73-0097
The vulnerability of Microsoft.NET Framework software and the Visual Studio source code editor is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
ROS-20260907-73-0083
The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development tools is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...
ROS-20260907-73-0085
The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development tools is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...
ROS-20260907-73-0098
The vulnerability of Microsoft.NET Framework software and the Visual Studio source code editor is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
ROS-20260907-73-0101
The vulnerability of Microsoft.NET Framework software and the Visual Studio source code editor is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
ROS-20260907-73-0087
The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development tools is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...
PT-2026-95055
A new version of the greentic-setup-dev crate was published with a variant of the PolinRider malware included that would fire when a project depending on greentic-setup-dev was opened in Visual Studio Code. One malicious version was published on 2026-09-06, approximately 27 hours before removal...
Exploit for CVE-2026-0920
CVE-2026-0920 - LA-Studio Element Kit / Unauthenticated Privil...
EUVD-2026-70794
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-70791
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network...
Vulnerability of the .NET software platform and Microsoft Visual Studio development tools, related to improper validation of specified input types, allowing attackers to trigger service failures.
The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment is related to improper validation of the specified data type. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
CVE-2026-80098
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62906
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network...
CVE-2026-80098
Copilot Studio is affected by an improper verification of cryptographic signature vulnerability that allows an unauthorized, remote attacker to elevate privileges over a network with low complexity , no required privileges , and no user interaction (CVSS 3.1: 9.3 CRITICAL , Scope: Changed, Integr...
CVE-2026-80098 Copilot Studio Elevation of Privilege Vulnerability
...
CVE-2026-80098 Copilot Studio Elevation of Privilege Vulnerability
...
CVE-2026-62906 Microsoft Discovery Studio Information Disclosure Vulnerability
...
CVE-2026-62906
Microsoft Discovery Studio is affected by an improper neutralization of special elements in data query logic , allowing an unauthorized attacker to disclose information over a network . The vulnerability is rated CVSS 7.4 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N, meaning it req...