Microsoft Visual Studio DDS File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the dxtex...

Microsoft Visual Studio Remote Code Execution Vulnerability (CNVD-2021-01041)

Microsoft Visual Studio is an integrated development environment for developing computer programs, websites, web applications, web services and mobile applications. A remote code execution vulnerability exists in Microsoft Visual Studio. An attacker could exploit the vulnerability to execute...

Security Updates for Microsoft Visual Studio Products (September 2020)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this...

Description of the security update for the remote code execution vulnerability in Microsoft Visual Studio 2015 Update 3: September 8, 2020

None None...

Description of the security update for Microsoft Visual Studio 2013 Update 5: September 8, 2020

None None...

Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: September 8, 2020

None None...

Visual Studio JSON Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an...

Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an...

Security Update for Microsoft Visual Studio Code (CVE-2020-16881)

The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.48.2. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file...

PT-2020-4028 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: A remote code execution issue exists in Microsoft Visual Studio due to improper handling of objects in memory. This could allow an attacker to run arbitrary code in the...

PT-2020-3893 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: A remote code execution issue exists when a user opens a malicious 'package.json' file, allowing an attacker to run arbitrary code in the context of the current user. If the user...

Vulnerabilities fixed in Microsoft Developer tools

Microsoft has fixed several vulnerabilities. A malicious remote user could potentially exploit the vulnerabilities to execute arbitrary execute arbitrary code or to bypass a security measure. Microsoft considers the vulnerability with attribute CVE-2020-16874 to be critical. The vulnerability in...

KLA11956 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Diagnostics Hub...

PT-2020-4080 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: A remote code execution issue exists due to improper handling of objects in memory. This could allow an attacker to run arbitrary code in the context of the current user. If the user...

Description of the security update for Microsoft Visual Studio 2012 Update 5: September 8, 2020

Description of the security update for Microsoft Visual Studio 2012 Update 5: September 8, 2020 Note This security update applies to Visual Studio 2012 Update 5 except for Visual Studio Isolated and Integrated Shells, Build Tools, Remote Tools, and Express for Web. Summary A remote code execution...

SharpHose - Asynchronous Password Spraying Tool In C# For Windows Environments

SharpHose is a C password spraying tool designed to be fast, safe, and usable over Cobalt Strike's execute-assembly. It provides a flexible way to interact with Active Directory using domain-joined and non-joined contexts, while also being able to target specific domains and domain controllers...

Microsoft Diagnostic Hub Standard Collector Elevation Of Privilege (CVE-2018-0952)

An elevation of privilege vulnerability exists in Microsoft visual studio 2015 update3. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Visual Studio Code Execution

The vulnerability of Visual Studio Code’s source editor is related to a error in variable handling after a project is opened. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

CVE-2020-0604

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...