10328 matches found
CVE-2025-24039 Visual Studio Code Elevation of Privilege Vulnerability
...
CVE-2025-24039
CVE-2025-24039 affects Microsoft Visual Studio Code; reported as elevation of privilege vulnerabilities in VS Code prior to 1.97.1. Technical details in connected sources show two issues: (1) an elevation of privilege in the code serve-web path on Windows where an attacker could place a malicious...
CVE-2025-24039 Visual Studio Code Elevation of Privilege Vulnerability
...
CVE-2025-21206 Visual Studio Installer Elevation of Privilege Vulnerability
...
CVE-2025-21206
The CVE-2025-21206 issue concerns the Visual Studio installers with an elevation-of-privilege vulnerability. A concrete root cause mentioned in connected PT-2025-6298 is an uncontrolled search path element affecting the Visual Studio Installer, which could allow a local attacker to gain higher pr...
CVE-2025-21206 Visual Studio Installer Elevation of Privilege Vulnerability
...
Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability
...
Visual Studio Installer Elevation of Privilege Vulnerability
...
Visual Studio Code Elevation of Privilege Vulnerability
...
PT-2025-6341 · Microsoft · Visual Studio Code Js Debug Extension
Name of the Vulnerable Software and Affected Versions: Visual Studio Code JS Debug Extension affected versions not specified Description: The issue concerns an elevation of privilege vulnerability in the JavaScript debugging extension of Visual Studio Code. Recommendations: At the moment, there i...
Microsoft Visual Studio 代码问题漏洞
Microsoft Visual Studio is a family of development tool suites and a largely complete set of development tools from Microsoft Corporation USA that includes most of the tools needed throughout the software lifecycle. A code issue vulnerability exists in Microsoft Visual Studio. An attacker could...
Microsoft Visual Studio Code 代码问题漏洞
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A code issue vulnerability exists in Microsoft Visual Studio Code. An attacker can exploit the vulnerability to elevate privileges...
KLA90918 PE vulnerability in Microsoft Visual Studio Code
An elevation of privilege vulnerability was found in Microsoft Visual Studio Code. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-24039 Exploitation Related products Microsoft-Visual-Studio Visual-Studio-Code Microsoft-Visual-Studio-Code CVE list...
PT-2025-6340 · Microsoft · Visual Studio Code
Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue concerns an elevation of privilege vulnerability. No specific details about affected devices, real-world incidents, or technical exploitation details such as API...
PT-2025-6298 · Microsoft · Visual Studio
Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Visual Studio installer, which is associated with an uncontrolled search path element. Exploitation of this issu...
Microsoft Visual Studio Code 访问控制错误漏洞
Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Visual Studio Code. An attacker can exploit the vulnerability to elevate privileges...
Security Update for Microsoft Visual Studio Code (February 2025)
The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.97.1. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability exists in VS Code 1.97.0 and earlier versions for users of the code serve-web command on Windows. An...
The vulnerabilities of the ReSharper plugin of the Microsoft Visual Studio software, the cross-platform integrated development environment from JetBrains called Rider, the performance profiler dotTrace, and the ETW Host Service at the kernel and application level, related to improper process management, allow attackers to gain elevated privileges.
The vulnerabilities of the ReSharper plugin of the Microsoft Visual Studio software, the cross-platform integrated development environment from JetBrains called Rider, the performance profiler dotTrace, and the kernel-level and application-level Event Tracking Service Host Service are related to...
