PT-2023-5049

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio affected versions not specified Description The issue is related to insufficient input validation in Microsoft Visual Studio, which can allow an attacker to execute arbitrary code. This can potentially lead to remote co...

PT-2023-5048

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio affected versions not specified Description The issue is related to insufficient input validation in Microsoft Visual Studio, allowing an attacker to execute arbitrary code. This can affect the system and potentially le...

CVE-2023-36792: Integer Overflow or Wraparound

Visual Studio Remote Code Execution Vulnerability...

PT-2023-5094 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to insufficient access restrictions in Microsoft Visual Studio, allowing an attacker to elevate their privileges using a specially crafted file. Recommendations: ...

CVE-2023-36759: Untrusted Pointer Dereference

Visual Studio Elevation of Privilege Vulnerability...

PT-2023-5065 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient input validation in Visual Studio Code, allowing an attacker to execute arbitrary code using a specially crafted file. Recommendations: At th...

Microsoft Visual Studio 安全漏洞

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio, which can be exploited by...

Ubuntu 22.04 LTS / 23.04 : .NET vulnerability (USN-6362-1)

The remote Ubuntu 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6362-1 advisory. Kevin Jones discovered that .NET did not properly process certain X.509 certificates. An attacker could possibly use this issue to cause a denial of...

Security Updates for Microsoft Visual Studio Products (September 2023)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A vulnerability in VSInstallerElevationService when running a malicious executable, which can lead to an Elevation of Privilege. CVE-2023-36758 - A vulnerability in...

CVE-2023-36794: Integer Underflow (Wrap or Wraparound)

Visual Studio Remote Code Execution Vulnerability...

CVE-2023-36799: Uncontrolled Resource Consumption

.NET Core and Visual Studio Denial of Service Vulnerability...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in several Developer Tools. A malicious party could exploit the vulnerabilities to cause a denial-of-service, grant himself elevated privileges granted privileges or execute arbitrary code with privileges from the developer. Successful exploitation requires the...

PT-2023-5050

Name of the Vulnerable Software and Affected Versions Visual Studio affected versions not specified Description The issue is related to insufficient input validation in Microsoft Visual Studio, which can be exploited to execute arbitrary code. This can allow an attacker to run malicious code on t...

PT-2023-5471

Name of the Vulnerable Software and Affected Versions .NET Core and Visual Studio affected versions not specified Description The issue is related to a Denial of Service vulnerability in .NET Core and Visual Studio. It involves an uncontrolled consumption of resources. Exploitation of this issue...

PT-2023-5001 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient access control in Microsoft Visual Studio, which can be exploited to elevate privileges. Recommendations: At the moment, there is no...

CVE-2023-36796: Integer Underflow (Wrap or Wraparound)

Visual Studio Remote Code Execution Vulnerability...

CVE-2023-36793

Visual Studio Remote Code Execution Vulnerability...

Microsoft .NET and Microsoft Visual Studio Security Vulnerabilities

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

vscode -- VS Code Remote Code Execution Vulnerability

VSCode developers report: Visual Studio Code Remote Code Execution Vulnerability A remote code execution vulnerability exists in VS Code 1.82.0 and earlier versions that working in a maliciously crafted package.json can result in executing commands locally. This scenario would require the attacke...

Security Update for Microsoft .NET Core (September 2023)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023Sep12 advisory. - Visual Studio Remote Code Execution Vulnerability CVE-2023-36792, CVE-2023-36793, CVE-2023-36794, CVE-2023-36796...