CVE-2023-33128: Use After Free

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2023-33126: Undefined Security Weakness

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2023-32032: Improper Input Validation

.NET and Visual Studio Elevation of Privilege Vulnerability...

CVE-2023-24936

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...

PT-2023-3137 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can allow an attacker to conduct spoofing attacks. There is no information provid...

PT-2023-3299

Name of the Vulnerable Software and Affected Versions .NET, .NET Framework, and Visual Studio affected versions not specified Description The issue is related to insufficient access control in Microsoft's .NET Framework, .NET, and Visual Studio, allowing an attacker to elevate their privileges...

PT-2023-9611

Name of the Vulnerable Software and Affected Versions Microsoft .NET and Visual Studio affected versions not specified Description The issue is related to a use-after-free memory vulnerability in the Microsoft .NET platform and the Visual Studio source code editor. Exploitation of this issue may...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in several Developer Tools. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root privileges Remote code execution...

Security Updates for Microsoft Visual Studio Products (June 2023)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability in the MSDIA SDK where corrupted PDBs can cause heap overflow, leading to a crash or remote code execution. CVE-2023-24897 - A remote...

KLA50317 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information, spoof user interface. Below is a complete list of...

UBUNTU-CVE-2023-24936

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...

Microsoft .NET Core security vulnerabilities

Microsoft .NET Core is a cross-platform, high-performance, open-source framework for building modern, cloud-enabled, Internet-connected applications from Microsoft Corporation. A security vulnerability exists in Microsoft .NET Core. The following products and versions are affected: Microsoft Visu...

Microsoft .NET Framework and Microsoft Visual Studio security vulnerabilities

Microsoft Visual Studio is a family of development tool suites and a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET Framework is a comprehensive and consistent programming model and development platform for building...

Microsoft Visual Studio and Microsoft .NET security vulnerabilities

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

PT-2023-9623 · Microsoft +7 · Net +8

Name of the Vulnerable Software and Affected Versions: .NET and Visual Studio affected versions not specified Description: The issue exists due to insufficient input validation in the .NET and Visual Studio platform. Exploitation of this issue may allow an attacker to elevate their privileges...

CVE-2023-3208

A vulnerability, which was classified as critical, has been found in RoadFlow Visual Process Engine .NET Core Mvc 2.13.3. Affected by this issue is some unknown functionality of the file /Log/Query?appid=0B736354-9473-4D66-B9C0-15CAC149EB05&tabid=tab0B73635494734D66B9C015CAC149EB05 of the compone...

CVE-2023-3208

A vulnerability, which was classified as critical, has been found in RoadFlow Visual Process Engine .NET Core Mvc 2.13.3. Affected by this issue is some unknown functionality of the file /Log/Query?appid=0B736354-9473-4D66-B9C0-15CAC149EB05&tabid=tab0B73635494734D66B9C015CAC149EB05 of the compone...

Sql injection

A vulnerability, which was classified as critical, has been found in RoadFlow Visual Process Engine .NET Core Mvc 2.13.3. Affected by this issue is some unknown functionality of the file /Log/Query?appid=0B736354-9473-4D66-B9C0-15CAC149EB05&tabid=tab0B73635494734D66B9C015CAC149EB05 of the compone...

CVE-2023-3208 RoadFlow Visual Process Engine .NET Core Mvc Login sql injection

A vulnerability, which was classified as critical, has been found in RoadFlow Visual Process Engine .NET Core Mvc 2.13.3. Affected by this issue is some unknown functionality of the file /Log/Query?appid=0B736354-9473-4D66-B9C0-15CAC149EB05&tabid=tab0B73635494734D66B9C015CAC149EB05 of the compone...

CVE-2023-3208

CVE-2023-3208 affects RoadFlow Visual Process Engine .NET Core MVC 2.13.3. The issue is in the Login component, where manipulation of the sidx/sord arguments in the endpoint "/Log/Query?appid=..." leads to a SQL injection. The vulnerability is exploitable remotely, and public exploits have been d...