CVE-2021-26700: Undefined Security Weakness

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...

CVE-2021-1639: Undefined Security Weakness

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-1721: Undefined Security Weakness

.NET Core and Visual Studio Denial of Service Vulnerability...

.NET Core DoS

The vulnerability of the .NET Core runtime, the PowerShell Core automation tool, and the Microsoft Visual Studio software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

PT-2021-17098 · Microsoft · Visual Studio Code Npm-Script Extension

Name of the Vulnerable Software and Affected Versions: Visual Studio Code npm-script Extension affected versions not specified Description: The issue concerns a remote code execution vulnerability in the Visual Studio Code npm-script Extension. There is no information provided about the estimated...

Security Update for Microsoft Visual Studio Code (Feb 2021)

An arbitrary code execution vulnerability exists in Microsoft Visual Studio Code. An unauthenticated, local attacker can exploit this by persuading a victim to open specially-crafted content which could exploit this vulnerability to execute arbitrary code on the system with privileges of the...

Security Update for Microsoft Visual Studio Code npm-script Extension (Feb 2021)

A remote code execution vulnerability exists in Visual Studio Code when the npm-script extension loads. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. Note that Nessus has not tested for this issue but has instead relied only ...

Security Updates for Microsoft Visual Studio Products (February 2021)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-1639 - A denial of servic...

Actively Exploited Windows Kernel Bug Allows Takeover

Microsoft has addressed nine critical-severity cybersecurity bugs in February’s Patch Tuesday updates, plus an important-rated vulnerability that is being actively exploited in the wild. Six of the security holes – including one of the critical bugs – were already publicly disclosed. Overall, the...

Visual Studio Code Remote Code Execution Vulnerability

...

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability

...

.NET Core and Visual Studio Denial of Service Vulnerability

...

PT-2021-2154 · Microsoft · Visual Studio +1

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Visual Studio Code affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visual Studio, which can allow an attacker to execute...

Microsoft Visual Studio Code Security Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A security vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected:Microsoft Visual Studio 2019 version 16.8,Visual Studio Code,Microsoft Visual Studio 2017...

KLA12073 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in .NET Core can be...

Microsoft .NET Core Security Vulnerability

Microsoft .NET Core is a free open source development platform from Microsoft USA. The platform is characterized by multi-language support and cross-platform. A security vulnerability exists in Microsoft .NET Core and Microsoft Visual Studio. The following products and versions are...

Microsoft Visual Studio Code npm-script plugin security vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft. A security vulnerability exists in the npm-script plugin for Microsoft Visual Studio Code. The following products and versions are affected: Visual Studio Code - npm-script Extension...

SharpEDRChecker - Checks Running Processes, Process Metadata, DLLs Loaded Into Your Current Process And The Each DLLs Metadata, Common Inst all Directories, Installed Services And Each Service Binaries Metadata, Installed Drivers And Each Drivers Metadata, All For The Presence Of Known Defensive Products Such As AV's, EDR's And Logging Tools

New and improved C Implementation of Invoke-EDRChecker. Checks running processes, process metadata, Dlls loaded into your current process and each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for...

State-Sponsored Threat Actors Target Security Researchers

This blog was co-authored by Caitlin Condon, VRM Security Research Manager, and Bob Rudis, Senior Director and Chief Security Data Scientist. On Monday, Jan. 25, 2021, Google’s Threat Analysis Group TAG published a blog on a widespread social engineering campaign that targeted security researcher...

North Korea Targets Security Researchers in Elaborate 0-Day Campaign

Hackers linked to North Korea are targeting security researchers with an elaborate social-engineering campaign that sets up trusted relationships with them — and then infects their organizations’ systems with custom backdoor malware. That’s according to Google’s Threat Analysis Group TAG, which...