6178 matches found
Patch Tuesday - March 2022
Microsoft's March 2022 updates include fixes for 92 CVEs including 21 from the Chromium project, which is used by their Edge web browser. None of them have been seen exploited in the wild, but three have been previously disclosed. CVE-2022-24512, affecting .NET and Visual Studio, and...
.NET and Visual Studio Denial of Service Vulnerability
...
.NET and Visual Studio Remote Code Execution Vulnerability
...
Microsoft Visual Studio Code security vulnerabilities
Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A security vulnerability exists in Microsoft Visual Studio Code. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...
Microsoft .NET Core and Microsoft Visual Studio input validation error vulnerabilities
Microsoft Visual Studio and Microsoft .NET Core are both products of Microsoft Corporation. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...
PT-2022-4632
Name of the Vulnerable Software and Affected Versions .NET versions prior to 6.0.3 .NET 5.0 versions prior to 5.0.15 .NET Core 3.1 versions prior to 3.1.23 Description The issue is related to a buffer overflow due to unchecked input data, which can allow a remote attacker to execute arbitrary cod...
Microsoft .NET Core and Microsoft Visual Studio code injection vulnerabilities
Microsoft Visual Studio and Microsoft .NET Core are both products of Microsoft Corporation. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...
KLA12474 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Visual Studio Code can be...
Security Updates for Microsoft Visual Studio Products (March 2022)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services. CVE-2022-24464 - A remote...
Security Bulletin: Multiple vulnerabilities may affect IBM Robotic Process Automation
Summary Multiple vulnerabilities in IBM Robotic Process Automation Vulnerability Details CVEID: CVE-2021-26701 DESCRIPTION: Microsoft .NET Core and Visual Studio could allow a remote attacker to execute arbitrary code on the system. By sending a specially crafted request, an attacker could exploi...
(0Day) Microsoft Visual Studio Link Following Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Visual Studio. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...
(0Day) Microsoft Visual Studio Link Following Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Visual Studio. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...
(0Day) Microsoft Visual Studio Link Following Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Visual Studio. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...
Visual Studio Code Source Editor Code Execution
The vulnerability of Visual Studio Code’s source editor is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Remote Development Extension RCE
The vulnerability of the Remote Development Extension extension of the Visual Studio Code editor is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Microsoft Visual Studio Code Code Injection Vulnerability (CNVD-2022-29568)
A code injection vulnerability exists in Microsoft Visual Studio Code, an open source code editor from Microsoft Corporation. The vulnerability stems from a network system or product that does not properly filter special elements in code segments constructed from external input data. An attacker...
CVE-2022-21991
Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability...
CVE-2022-21991
Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability...
