CVE-2025-21264 Visual Studio Code Security Feature Bypass Vulnerability

...

CVE-2025-21264 Visual Studio Code Security Feature Bypass Vulnerability

...

CVE-2025-21264

Visual Studio Code (VS Code) is affected by CVE-2025-21264, a local vulnerability described as a security feature bypass. The issue permits an unauthorized, local attacker to bypass a security feature due to how VS Code handles files/directories accessible to external parties and trusted domains....

CVE-2025-32703

CVE-2025-32703 (Visual Studio) is an information-disclosure vulnerability caused by insufficient granularity of access control in Visual Studio, enabling an authorized, local attacker to disclose information. The vulnerability affects multiple Visual Studio releases (2017 15.x, 2019 16.x, 2022 17...

CVE-2025-32703 Visual Studio Information Disclosure Vulnerability

...

CVE-2025-32703 Visual Studio Information Disclosure Vulnerability

...

Visual Studio Information Disclosure Vulnerability

Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally...

.NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability

External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...

Visual Studio Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Visual Studio allows an unauthorized attacker to execute code locally...

Visual Studio Code Security Feature Bypass Vulnerability

Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

KLA90915 SB vulnerability in Microsoft Visual Studio Code

A security feature bypass vulnerability was found in Microsoft Visual Studio Code. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2025-21264 Exploitation Related products Microsoft-Visual-Studio Visual-Studio-Code Microsoft-Visual-Studio-Co...

UBUNTU-CVE-2025-26646

External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...

KLA83571 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A security feature bypas...

PT-2025-21127

Name of the Vulnerable Software and Affected Versions: .NET versions prior to the fixed version Visual Studio affected versions not specified Build Tools for Visual Studio affected versions not specified Description: The issue allows an authorized attacker to perform spoofing over a network due t...

PT-2025-21005 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to insufficient granularity of access control, allowing an authorized attacker to disclose information locally. There is no information provided about the estimat...

PT-2025-21004 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio versions prior to 17.13.3 Description: The issue is related to improper neutralization of special elements used in a command, allowing an unauthorized attacker to execute code locally. This is a command injection vulnerability i...

Microsoft Visual Studio 命令注入漏洞

Microsoft Visual Studio is a family of development tool suites from Microsoft Corporation USA and a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. A command injection vulnerability exists in Microsoft Visual Studio. An attacker could...

Microsoft Visual Studio Code 安全漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Microsoft Visual Studio Code. An attacker exploiting the vulnerability can bypass certain features...

PT-2025-20936 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue allows an unauthorized attacker to bypass a security feature locally in Visual Studio Code when files or directories are accessible to external parties. Recommendations...

Microsoft Visual Studio和Microsoft .NET 安全漏洞

Microsoft Visual Studio and Microsoft .NET are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...