Spoofing

Visual Studio Code Spoofing Vulnerability...

Privilege escalation

Visual Studio Elevation of Privilege Vulnerability...

CVE-2021-36952 Visual Studio Remote Code Execution Vulnerability

...

CVE-2021-36952

The linked Nessus entry for CVE-2021-36952 identifies Visual Studio as affected, describing a local, memory-handling vulnerability that an unauthenticated attacker can exploit to bypass authentication and execute arbitrary commands. This is stated as a Visual Studio code-execution issue caused by...

CVE-2021-26437 Visual Studio Code Spoofing Vulnerability

...

CVE-2021-26437

CVE-2021-26437 concerns a spoofing vulnerability in Microsoft Visual Studio Code. The available documents describe a UI spoofing issue in VS Code with a local attack vector, requiring user interaction, and separate risk details. A remediation referenced by a Nessus plugin indicates updating to Vi...

CVE-2021-26437 Visual Studio Code Spoofing Vulnerability

...

CVE-2021-26434

CVE-2021-26434 is a Visual Studio local privilege escalation. The issue arises during installation of Game development with C++/Unreal Engine workload, where the installer creates a directory with write permissions for all users, enabling LPE. Affected products include various Visual Studio versi...

CVE-2021-26434 Visual Studio Elevation of Privilege Vulnerability

...

Microsoft Releases Patch for Actively Exploited Windows Zero-Day Vulnerability

A day after Apple and Google rolled out urgent security updates, Microsoft has pushed software fixes as part of its monthly Patch Tuesday release cycle to plug 66 security holes affecting Windows and other components such as Azure, Office, BitLocker, and Visual Studio, including an actively...

CVE-2021-26437: Undefined Security Weakness

Visual Studio Code Spoofing Vulnerability...

CVE-2021-26434: Incorrect Permission Assignment for Critical Resource

Visual Studio Elevation of Privilege Vulnerability...

CVE-2021-36952: Out-of-bounds Write

Visual Studio Remote Code Execution Vulnerability...

Visual Studio Code Spoofing Vulnerability

...

Visual Studio Remote Code Execution Vulnerability

...

Visual Studio Elevation of Privilege Vulnerability

...

PT-2021-6978 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no...

PT-2021-6955 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Visual Studio, allowing an attacker to escalate their privileges. Recommendations: At the moment, there is...

KLA12285 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio can be...

PT-2021-6962 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can allow an attacker to conduct spoofing attacks. There is also a mention of a...