6064 matches found
PT-2026-87822
Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...
PT-2026-87468
Name of the Vulnerable Software and Affected Versions Microsoft.DiaSymReader.Native versions 17.10.0-beta1.24272.1 through 18.9.0-beta1.26405.1 Description A heap-based buffer overflow exists in .NET and Visual Studio, specifically within Microsoft.DiaSymReader.Native. This issue occurs due to an...
PT-2026-87538
@deskmodder Important context: CVE-2026-69522 is a UI:R crafted-file RCE in this servicing set. If Visual Studio is in the environment, pair the .NET bumps with VS 2026 18.9.3 or VS 2022 17.14.40...
CVE-2026-77906: Heap-based Buffer Overflow
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
CVE-2026-81383: Use of Incorrectly-Resolved Name or Reference
Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-78462: Authorization Bypass Through User-Controlled Key
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-71328: Heap-based Buffer Overflow
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
CVE-2026-69439: Heap-based Buffer Overflow
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-81381: Insufficiently Protected Credentials
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-81380: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-81379: Not Failing Securely
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-81378: Interpretation Conflict
Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-81377: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to perform tampering over a network...
CVE-2026-81376: Incomplete Comparison with Missing Factors
Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-81356: Inconsistent Interpretation of HTTP Requests
Inconsistent interpretation of http requests 'http request/response smuggling' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-78461: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-77907: Heap-based Buffer Overflow
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
CVE-2026-70334: Incomplete List of Disallowed Inputs
Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...