CVE-2025-24070

The CVE describes a weak authentication issue in ASP.NET Core and Visual Studio that could allow elevation of privilege via calls to RefreshSignInAsync with an improperly authenticated user parameter. Affected software includes ASP.NET Core apps using Microsoft.AspNetCore.Identity (affected versi...

CVE-2025-24070 ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

...

CVE-2025-24070

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network...

Visual Studio Elevation of Privilege Vulnerability

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...

Visual Studio Code Elevation of Privilege Vulnerability

Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally...

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network...

Visual Studio Elevation of Privilege Vulnerability

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...

PT-2025-10847 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to an uncontrolled search path element that allows an authorized attacker to elevate privileges locally. There is no information provided about the estimated...

Microsoft Visual Studio Code 代码问题漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A code issue vulnerability exists in Microsoft Visual Studio Code. An attacker can exploit this vulnerability to elevate privileges. No information about this vulnerability is available at this time, so stay tuned to...

Ashlar-Vellum Cobalt 缓冲区错误漏洞

Ashlar-Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar-Vellum. A buffer error vulnerability exists in Ashlar-Vellum Cobalt that stems from an out-of-bounds read in VS file parsing, which could lead to a remote attacker executing arbitrary code...

KLA90917 PE vulnerability in Microsoft Visual Studio Code

An elevation of privilege vulnerability was found in Microsoft Visual Studio Code. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-26631 Exploitation Related products Microsoft-Visual-Studio Visual-Studio-Code Microsoft-Visual-Studio-Code CVE list...

Ashlar-Vellum Cobalt 安全漏洞

Ashlar-Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar-Vellum. A security vulnerability exists in Ashlar-Vellum Cobalt that stems from type confusion when parsing VS files, which could lead to remote code execution...

Microsoft Visual Studio和Microsoft ASP.NET Core 安全漏洞

Microsoft Visual Studio and Microsoft ASP.NET Core are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a largely complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft...

Microsoft Visual Studio 代码问题漏洞

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio, which can be exploited by...

Microsoft Visual Studio 代码问题漏洞

Microsoft Visual Studio is a family of development tool suites and a largely complete set of development tools from Microsoft Corporation USA that includes most of the tools needed throughout the software lifecycle. A code issue vulnerability exists in Microsoft Visual Studio. An attacker could...

PT-2025-10842 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to an uncontrolled search path element in Visual Studio, allowing an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is n...

PT-2025-10815

Name of the Vulnerable Software and Affected Versions: ASP.NET Core versions prior to 9.0.3 ASP.NET Core versions prior to 8.0.14 ASP.NET Core versions prior to 6.0.37 Description: A vulnerability exists in ASP.NET Core applications calling RefreshSignInAsync with an improperly authenticated user...

UBUNTU-CVE-2025-24070

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network...

The vulnerability of Microsoft Visual Studio Code’s source editor, related to an uncontrolled search path element, allows attackers to escalate their privileges.

The vulnerability of Microsoft Visual Studio Code’s source editor is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to gain increased privileges...

The vulnerability of Visual Studio Code’s JS Debug editor, related to vulnerabilities in access control, allows attackers to escalate their privileges.

The vulnerability of Visual Studio Code’s JS Debug editor for source code editing is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...