10419 matches found
Description of the security update for Expression Blend 4: July 10, 2018
Description of the security update for Expression Blend 4: July 10, 2018 Summary A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project. To learn more about the vulnerability, go to CVE-2018-8172...
Description of the security update for Expression Blend 3: July 31, 2018
Description of the security update for Expression Blend 3: July 31, 2018 Summary A remote code execution vulnerability exists in Visual Studio software if the software does not check the source markup of a file for an unbuilt project. This issue affects Microsoft Expression Blend 3. To learn more...
Description of the security update for the remote code execution vulnerability in Visual Studio 2013 Update 5: July 10, 2018 (KB4336986)
None None...
Description of the security update for the remote code execution vulnerability in Visual Studio 2015 Update 3: July 10, 2018
None None...
Description of the security update for the remote code execution vulnerability in Visual Studio 2012 Update 5: July 10, 2018
Description of the security update for the remote code execution vulnerability in Visual Studio 2012 Update 5: July 10, 2018 Notice Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS. Summary A remote code execution...
Description of the security update for the remote code execution vulnerability in Visual Studio 2010 Service Pack 1: July 10, 2018
Description of the security update for the remote code execution vulnerability in Visual Studio 2010 Service Pack 1: July 10, 2018 Notice Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS. Summary A remote code execution...
Microsoft Visual Studio CVE-2018-8172 Remote Code Execution Vulnerability
Description Microsoft Visual Studio is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the current-user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...
KLA11288 Multiple vulnerabilities in Microsoft Development Tools
Multiple serious vulnerabilities have been found in Microsoft Development Tools. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A tampering...
PT-2018-3940 · Microsoft · Expression Blend 4 +1
Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Expression Blend 4 affected versions not specified Description: A remote code execution issue exists due to insufficient access control checks in the software, potentially allowing an...
Microsoft Macro Assembler CVE-2018-8232 Security Bypass Vulnerability
Description Microsoft Macro Assembler is prone to a security bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions; this may aid in launching further attacks. Technologies Affected Microsoft Visual Studio 2017 15.7.5 Microsoft Visual Studio 2017 15.8...
CVE-2018-13304
In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studioprofile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to errorresilience.c, h263dec.c, and...
CVE-2018-13304
In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studioprofile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to errorresilience.c, h263dec.c, and...
SQL Injection Vulnerability in Azeus CMS
Azeus CMS is a cms system made by Azeus Studio, this CMS is written in UTF-8 coding. SQL injection vulnerability exists in Azeus CMS. An attacker can exploit the vulnerability to obtain sensitive information from the database...
Cross-site Scripting (XSS)
Microsoft.AspNet.SignalR is vulnerable to cross-site scripting XSS attack. The application does not properly sanitize user-supplied input before displaying it. This can allow a malicious user to inject and execute arbitrary code in the target user's browser which can lead to access to...
Microsoft Visual Studio Code installer untrustworthy search path vulnerability
Microsoft Visual Studio Code is a cross-platform source code editor for writing modern web applications and cloud applications that supports OS X, Windows, and Linux platforms from Microsoft, USA. installer is an installer for Visual Studio Code. An untrusted search path vulnerability exists in t...
Microsoft Visual Studio Community installer untrustworthy search path vulnerability
Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete set of development tools that includes most of the tools needed throughout the software lifecycle.Visual Studio Community is the community edition of Visual Studio.The installer is the Visual...
CVE-2018-0597
Untrusted search path vulnerability in the installer of Visual Studio Code allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2018-0597
Untrusted search path vulnerability in the installer of Visual Studio Code allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
