6083 matches found
CVE-2025-26646 .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability
...
CVE-2025-26646 .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability
...
CVE-2025-26646
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed vulnerabilities in several Developer Tools. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Circumvention of a security measure - Execution of arbitrary code user privileges - Access to sensitive dat...
CVE-2025-32703
Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally...
CVE-2025-32703
Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally...
CVE-2025-32702
Improper neutralization of special elements used in a command 'command injection' in Visual Studio allows an unauthorized attacker to execute code locally...
CVE-2025-32702
Improper neutralization of special elements used in a command 'command injection' in Visual Studio allows an unauthorized attacker to execute code locally...
CVE-2025-21264
Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-21264
Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-32702 Visual Studio Remote Code Execution Vulnerability
...
CVE-2025-32702 Visual Studio Remote Code Execution Vulnerability
...
CVE-2025-32702
CVE-2025-32702 is a Visual Studio command-injection vulnerability (Improper neutralization of special elements used in a command) that allows local code execution. Affected products include Microsoft Visual Studio 2019/2022 and related Build Tools; attack vector is LOCAL with LOW complexity, req...
CVE-2025-21264 Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2025-21264 Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2025-21264
Visual Studio Code (VS Code) is affected by CVE-2025-21264, a local vulnerability described as a security feature bypass. The issue permits an unauthorized, local attacker to bypass a security feature due to how VS Code handles files/directories accessible to external parties and trusted domains....
CVE-2025-21264
Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-32703 Visual Studio Information Disclosure Vulnerability
...
CVE-2025-32703
CVE-2025-32703 (Visual Studio) is an information-disclosure vulnerability caused by insufficient granularity of access control in Visual Studio, enabling an authorized, local attacker to disclose information. The vulnerability affects multiple Visual Studio releases (2017 15.x, 2019 16.x, 2022 17...