846 matches found
Security Updates for Microsoft Visual Studio Products (April 2021)
The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by the multiple vulnerabilities, including the following: - A privilege escalation vulnerability exists in Microsoft Visual Studio's installer component. An authenticated, local attacker can exploit thi...
Microsoft Diagnostics Hub Standard Collector Service 权限许可和访问控制问题漏洞
Microsoft Diagnostics Hub Standard Collector Service is a Win32 service from Microsoft USA. It is used to collect real-time ETW events and process them. The Microsoft Diagnostics Hub Standard Collector Service is vulnerable to privilege permission and access control issues. The following products...
Microsoft Visual Studio Code 代码注入漏洞
Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code. A remote attacker can exploit this vulnerability to execute arbitrary code...
Microsoft Visual Studio Code 代码注入漏洞
Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code, which stems from a GitHub pull request and a remote code execution vulnerability in the extension in question...
Security Update for Microsoft Visual Studio Code Maven for Java Extension (April 2021)
The Microsoft Visual Studio Code Maven for Java Extension is prior to version 0.29.0. It is, therefore, affected by a remote code execution vulnerability. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system...
Security Update for Microsoft Visual Studio Code Kubernetes Tools Extension (April 2021)
The Microsoft Visual Studio Code Kubernetes Tools Extension is prior to version 1.3.0. It is, therefore, affected by a remote code execution vulnerability. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the syste...
Microsoft Visual Studio Code Code Injection Vulnerability
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A code injection vulnerability in Microsoft Visual Studio Code unofficial C/C++ Advanced Lint extension prior to version 1.9.0 can be exploited by an attacker to execute arbitrary binaries when a user opens a carefully...
Security Update for Microsoft Visual Studio Code ESLint Extension (March 2021)
Microsoft Visual Studio Code Remote Development Extension could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the...
Security Update for Microsoft Visual Studio Code ESLint Extension (March 2021)
Microsoft Visual Studio Code ESLint Extension could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the victim. Note...
Security Updates for Microsoft Visual Studio Products (March 2021)
The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-21300 C Tenable Netwo...
Security Update for Microsoft Visual Studio Code (March 2021)
An arbitrary code execution vulnerability exists in Microsoft Visual Studio Code. An unauthenticated, local attacker can exploit this by persuading a victim to open specially-crafted content which could exploit this vulnerability to execute arbitrary code on the system with privileges of the...
Security Update for Microsoft Visual Studio Code Quantum Development Kit Extension (March 2021)
Microsoft Quantum Development Kit for Visual Studio Code could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the...
Microsoft Visual Studio Code 安全漏洞
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected: Microsoft Visual Studio Code ESLint extension...
KLA12110 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio Code ESLint Extension can be exploited remotely to...
The vulnerability of Microsoft Visual Studio software, related to insufficient validation of input data, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Visual Studio software relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Security Update for Microsoft Visual Studio Code (Feb 2021)
An arbitrary code execution vulnerability exists in Microsoft Visual Studio Code. An unauthenticated, local attacker can exploit this by persuading a victim to open specially-crafted content which could exploit this vulnerability to execute arbitrary code on the system with privileges of the...
Security Updates for Microsoft Visual Studio Products (February 2021)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-1639 - A denial of servic...
Microsoft .NET Core Security Vulnerability
Microsoft .NET Core is a free open source development platform from Microsoft USA. The platform is characterized by multi-language support and cross-platform. A security vulnerability exists in Microsoft .NET Core and Microsoft Visual Studio. The following products and versions are...
The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment lies in insufficient validation of input data, allowing attackers to trigger service failures.
The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
Security Updates for Microsoft Visual Studio Products (January 2021)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1651, CVE-2021-1680 - A denial of service DoS vulnerability. An...