28 matches found
CVE-2026-103572
Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...
EUVD-2026-99027
Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...
CVE-2026-103572
A code injection vulnerability exists in Visual Studio Tools for Applications and SQL Server Management Studio . Due to improper control of code generation, an unauthorized attacker can execute arbitrary code over a network. This vulnerability has a CVSS 3.1 score of 8.8 and is reported to have a...
Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...
CVE-2026-103572: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...
Visual Studio Tools for Applications Elevation of Privilege (CVE-2025-29803)
In VSTA 2019 prior 16.0.35907.0 and VSTA 2022 prior to 17.0.35906.0, the software contains a vulnerability CVE-2025-29803 that could allow remote or local attackers to execute arbitrary code or escalate privileges within the host application, potentially compromising systems that rely on VSTA for...
EUVD-2025-10834
Malicious code in bioql PyPI...
EUVD-2023-40817
Malicious code in bioql PyPI...
Microsoft Visual Studio Tools for Applications Installed (Windows)
Binary data microsoftvisualstudiotoolsforapplicationswininstalled.nbin...
ROS-20250619-03
A vulnerability in the Microsoft Visual Studio software development tool, the Microsoft.NET software platform, and the Build Tools for Visual Studio toolkit is associated with an incorrect external external vulnerability. Microsoft.NET and Build Tools for Visual Studio toolkit is related to...
CVE-2025-29803
Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally...
CVE-2025-29803
Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally...
CVE-2025-29803 Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability
...
CVE-2025-29803 Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability
...
CVE-2025-29803
CVE-2025-29803 affects Microsoft Visual Studio Tools for Applications (VSTA) 2019 (before 16.0.35907.0) and VSTA 2022 (before 17.0.35906.0) and SQL Server Management Studio. The vulnerability is due to an uncontrolled search path element, enabling an authorized attacker to escalate privileges loc...
CVE-2025-29803: Uncontrolled Search Path Element
Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally...
VSTA Uncontrolled Search Path Privilege Escalation
The vulnerability of the toolset for configuring Microsoft Visual Studio Tools for Applications VSTA is related to an uncontrolled search path element. Exploiting this vulnerability could allow an attacker to increase their privileges...
Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability
Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally...
Microsoft .NET platforms and DoS
The vulnerabilities of Microsoft .NET software platforms and Microsoft Visual Studio development tools stem from synchronization errors when using shared resources. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions...
