11683 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-69522
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. CVE-2026-69522 Note that Nessus relies on the presen...
Microsoft Visual Studio Products (September 2026)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. CVE-2026-69439 - Heap-based buffer overflow in...
Linux Distros Unpatched Vulnerability : CVE-2026-69439
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. CVE-2026-69439 Note that Nessus relie...
Security Update for Microsoft Visual Studio Code (September 2026)
The remote host has an application installed that is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-784...
vulnerabilities handled in Microsoft Developer Tools
Microsoft has identified 15 vulnerabilities in various Developer Tools. A malicious individual could exploit these vulnerabilities to carry out attacks that can cause damage, as listed in the table below. The most severe vulnerability, with the identifier CVE-2026-81376, has a CVSS score of 9.6. ...
Duplicate Advisory: Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-63gh-g2x5-x69v. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
Duplicate Advisory: Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2j8r-3c22-8565. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
Duplicate Advisory: Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-527h-q9f6-p7qx. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a...
CVE-2026-81383
Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-81378
Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-81379
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-81379
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-81381
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-81380
Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-81383
Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-81380
Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-81356
Inconsistent interpretation of http requests 'http request/response smuggling' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-81376
Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...