6182 matches found
CVE-2026-102869: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
PT-2026-111937
šØ CVE-2026-102235 Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network. š@cveNotify...
PT-2026-111805
Name of the Vulnerable Software and Affected Versions Visual Studio Tools for Applications affected versions not specified SQL Server Management Studio affected versions not specified Visual Studio Copilot extension affected versions not specified Description Improper control of code generation...
CVE-2026-102235: Improper Encoding or Escaping of Output
Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network...
PT-2026-111936
Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Reliance on untrusted inputs in a security decision allows an unauthorized attacker to bypass the Workspace Trust security feature over a network. Workspace Trust is designed to...
Microsoft Visual Studio: CVE-2026-102870: ASP.NET Core Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...
PT-2026-112217
šØ CVE-2026-70098 Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. š@cveNotify...
CVE-2026-102233: Missing Authorization
Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-102231: Improper Resolution of Path Equivalence
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-102232: Incorrect Authorization
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-102851: Incorrect Privilege Assignment
Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...
CVE-2026-103572: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...
PT-2026-112052
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-102229: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an authorized attacker to disclose information over a network...
PT-2026-111932
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an authorized attacker to disclose information over a network...
PT-2026-111935
Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
Microsoft VS Code: CVE-2026-70098: Visual Studio Code Remote Code Execution Vulnerability
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...
Microsoft .NET Framework: CVE-2026-102869: .NET and Visual Studio Elevation of Privilege Vulnerability
Access of resource using incompatible type 'type confusion' in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
PT-2026-111938
Name of the Vulnerable Software and Affected Versions Visual Studio Code versions prior to 1.141.1 Description An issue exists where improper limitation of a pathname to a restricted directory, known as path traversal, allows an unauthorized attacker to execute code over a network. Path traversal...
PT-2026-111939
Name of the Vulnerable Software and Affected Versions Visual Studio Code versions prior to 1.141.1 Description Incorrect privilege assignment occurs when MCP sandboxing is enabled, allowing an authorized attacker to bypass a security feature locally. The issue arises because approvals for network...