PT-2023-3989 · Microsoft · Visual Studio Code Github Pull Requests/Issues Extension

Name of the Vulnerable Software and Affected Versions: Visual Studio Code GitHub Pull Requests and Issues Extension affected versions not specified Description: The issue is related to errors in processing input data in the Visual Studio Code GitHub Pull Requests and Issues Extension. Exploitatio...

UBUNTU-CVE-2023-33170

ASP.NET and Visual Studio Security Feature Bypass Vulnerability...

PT-2023-3569

Name of the Vulnerable Software and Affected Versions .NET and Visual Studio affected versions not specified Description The issue is caused by synchronization errors when using a shared resource in the .NET and Visual Studio software platform. Exploitation of this issue may allow a remote attack...

Microsoft Visual Studio和Microsoft .NET 安全漏洞

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

CVE-2023-33127: Insufficient Granularity of Access Control

.NET and Visual Studio Elevation of Privilege Vulnerability...

CVE-2023-33170: Concurrent Execution using Shared Resource with Improper Synchronization

ASP.NET and Visual Studio Security Feature Bypass Vulnerability...

CVE-2023-33170

ASP.NET and Visual Studio Security Feature Bypass Vulnerability...

CVE-2023-33127

.NET and Visual Studio Elevation of Privilege Vulnerability...

PT-2023-3568

Name of the Vulnerable Software and Affected Versions ASP.NET and Visual Studio affected versions not specified Description The issue is caused by synchronization errors when using a shared resource in the .NET platform and Microsoft Visual Studio. This can allow a remote attacker to bypass...

Microsoft ASP.NET 和 Visual Studio 竞争条件问题漏洞

Microsoft Visual Studio and Microsoft ASP.NET Core are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft ASP.NET...

Security Updates for Microsoft Visual Studio Products (July 2023)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A vulnerability exist in ASP.NET Core applications where account lockout maximum failed attempts may not be immediately updated, allowing an attacker to try more passwords...

Security Update for Microsoft Visual Studio Code GitHub Pull Requests and Isssues Extension (July 2023)

The Microsoft Visual Studio Code GitHub Pull Requests and Issues Extension is prior to version 0.66.2. It is, therefore, affected by a remote code execution vulnerability. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary...

snyk Code Injection vulnerability

The package snyk before 1.1064.0 is vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a malicious project can include commands in a build file such as build.gradle or gradle-wrapper.jar, which will be executed with the privileges of the application...

GHSA-4VRV-93C7-M92J snyk Code Injection vulnerability

The package snyk before 1.1064.0 is vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a malicious project can include commands in a build file such as build.gradle or gradle-wrapper.jar, which will be executed with the privileges of the application...

Microsoft Visual Studio .NET Code Execution

The vulnerability of the Microsoft Visual Studio software and the Microsoft.NET platform is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft’s platforms such as Privilege Escalation

The vulnerabilities of Microsoft’s software platforms such as the .NET Framework, .NET, and the Microsoft Visual Studio development tools are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

Microsoft .NET Framework DoS

The vulnerabilities of Microsoft’s software platforms such as the .NET Framework and .NET, as well as Microsoft Visual Studio, are related to insufficient testing of input data. Exploiting these vulnerabilities can allow attackers to cause system failures...

Microsoft Patch Tuesday June 2023: Edge type confusion, Git RCE, OneNote Spoofing, PGM RCE, Exchange RCE, SharePoint EoP

Microsoft Patch Tuesday June 2023: Edge type confusion, Git RCE, OneNote Spoofing, PGM RCE, Exchange RCE, SharePoint EoP. Hello everyone! This episode will be about Microsoft Patch Tuesday for June 2023, including vulnerabilities that were added between May and June Patch Tuesdays. Alternative...

Microsoft Visual Studio Unauthorized Access

The vulnerability of the Microsoft Visual Studio software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Microsoft Visual Studio Privilege Escalation

The vulnerability of Microsoft Visual Studio, a software development tool, and the Microsoft.NET platform is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...