10897 matches found
CVE-2023-24893
CVE-2023-24893 affects Visual Studio Code; versions prior to 1.77.2 are vulnerable to remote code execution. An attacker could bypass authentication and execute arbitrary commands. Remediation: update VS Code to 1.77.2 or later per Nessus plugin details. Other sources corroborate RCE vectors for ...
CVE-2023-24893 Visual Studio Code Remote Code Execution Vulnerability
...
Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages
Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious NuGet packages as part of a supply chain attack targeting .NET developers. The sophisticated typosquatting campaign, which was uncovered by JFrog late last month,...
Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages
Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious NuGet packages as part of a supply chain attack targeting .NET developers. The sophisticated typosquatting campaign, which was uncovered by JFrog late last month,...
Visual Studio Remote Code Execution Vulnerability
...
Visual Studio Elevation of Privilege Vulnerability
...
Visual Studio Information Disclosure Vulnerability
...
Visual Studio Spoofing Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
PT-2023-2289 · Microsoft · Visual Studio
Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to gain unauthorized access to protected information. Recommendations: At the moment, there is no...
CVE-2023-24893: Improper Input Validation
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2023-28296: Double Free
Visual Studio Remote Code Execution Vulnerability...
CVE-2023-28263: Improper Null Termination
Visual Studio Information Disclosure Vulnerability...
CVE-2023-28262: Heap-based Buffer Overflow
Visual Studio Elevation of Privilege Vulnerability...
PT-2023-2432 · Microsoft +1 · Visual Studio +2
Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Microsoft Visual Studio Code affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visual Studio, which can allow an attacker to...
PT-2023-2312 · Microsoft · Visual Studio
Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visual Studio, which can be exploited to execute arbitrary code. Recommendations: At the moment, there is ...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed vulnerabilities in Microsoft Developer Tools. A malicious party could exploit the vulnerabilities to gain access to sensitive data, obtain elevated privileges or execute arbitrary code. To do so the malicious party must have access to a system on which the vulnerable...
KLA48843 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability...
Microsoft Visual Studio security vulnerabilities
Microsoft Visual Studio is a family of development tools from Microsoft Corporation USA, and a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft Visual Studio is vulnerable to a spoofing vulnerability that can be exploited by...
Microsoft Visual Studio security vulnerabilities
Microsoft Windows is a windowed operating system developed by Microsoft Corporation in the United States. A remote code execution vulnerability exists in Microsoft Visual Studio, which can be exploited by attackers to execute code on the target host...