5197 matches found
Security Update for Microsoft Visual Studio Code (March 2025)
The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.98.0. It is, therefore, affected by multiple vulnerabilities: - Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally. CVE-2025-26631 Note that Nessu...
CVE-2025-25003
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...
CVE-2025-24998
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...
CVE-2025-26631
Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally...
The vulnerability of the Microsoft Visual Studio software development tool, related to an uncontrolled search path element, allows a hacker to escalate their privileges.
The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of Visual Studio Code’s source editor lies in its uncontrolled pathfinding mechanism, which allows attackers to escalate their privileges.
The vulnerability of Visual Studio Code’s source editor is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...
The vulnerability of the Microsoft Visual Studio software development tool, related to an uncontrolled search path element, allows a hacker to escalate their privileges.
The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
Microsoft Visual Studio Elevation of Privilege Vulnerability (CNVD-2025-05245)
Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio, which can be exploited by...
CVE-2025-2022
Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...
CVE-2025-2015
Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft fixed vulnerabilities in Visual Studio and .NET A malicious party could exploit the vulnerabilities to grant themselves elevated privileges and/or execute arbitrary code with developer privileges. Because developers tend to work under elevated privileges, it cannot be ruled out that...
CVE-2025-26631
Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally...
CVE-2025-26631
Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally...
CVE-2025-25003
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...
CVE-2025-25003
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...
CVE-2025-24998
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...
CVE-2025-24998
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...
CVE-2025-24070
Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network...
