Microsoft Visual Studio .NET Code Execution

The vulnerability of the Microsoft Visual Studio software and the Microsoft.NET platform is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft .NET Framework DoS

The vulnerabilities of Microsoft’s software platforms such as the .NET Framework and .NET, as well as Microsoft Visual Studio, are related to insufficient testing of input data. Exploiting these vulnerabilities can allow attackers to cause system failures...

Microsoft’s platforms such as Privilege Escalation

The vulnerabilities of Microsoft’s software platforms such as the .NET Framework, .NET, and the Microsoft Visual Studio development tools are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

Microsoft Patch Tuesday June 2023: Edge type confusion, Git RCE, OneNote Spoofing, PGM RCE, Exchange RCE, SharePoint EoP

Microsoft Patch Tuesday June 2023: Edge type confusion, Git RCE, OneNote Spoofing, PGM RCE, Exchange RCE, SharePoint EoP. Hello everyone! This episode will be about Microsoft Patch Tuesday for June 2023, including vulnerabilities that were added between May and June Patch Tuesdays. Alternative...

Microsoft Visual Studio Unauthorized Access

The vulnerability of the Microsoft Visual Studio software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Microsoft Visual Studio Privilege Escalation

The vulnerability of Microsoft Visual Studio, a software development tool, and the Microsoft.NET platform is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft .NET Framework Code Execution

The vulnerability of Microsoft’s software platforms such as the .NET Framework and .NET, as well as Microsoft Visual Studio, relates to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Visual Studio Code Spoofing

The vulnerability of Visual Studio Code’s source editor is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

Oracle Linux 9 : .NET / 7.0 (ELSA-2023-3592)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-3592 advisory. 7.0.107-1.0.1 - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier Orabug: 34671152 7.0.107-1 - Update to .NET SDK 7.0.107...

Oracle Linux 8 : .NET / 7.0 (ELSA-2023-3593)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-3593 advisory. 7.0.107-1.0.1 - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier Orabug: 34671152 7.0.107-1 - Update to .NET SDK 7.0.107...

Microsoft .NET Framework Code Execution

The vulnerability of Microsoft’s software platforms such as the .NET Framework and .NET, as well as Microsoft Visual Studio, relates to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Microsoft Visual Studio Information Disclosure Vulnerability (CNVD-2023-101682)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete set of development tools that includes most of the tools needed throughout the software lifecycle. An information disclosure vulnerability exists in Microsoft Visual Studio, which can be exploite...

Microsoft Visual Studio Elevation of Privilege Vulnerability (CNVD-2023-101683)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio, which can be exploited by...

Code Injection

.NET and Visual Studio are vulnerable to Code Injection. The vulnerability occurs during a crash or stack trace, which allows an attacker to inject and execute arbitrary codes into the system...

Security Update for Microsoft Visual Studio Code (June 2023)

The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.79.1. It is, therefore, affected by a session spoofing vulnerability. An attacker can exploit this to perform actions with the privileges of another user. %NASLMINLEVEL 80900 Tenable, Inc. The descripti...

KLA62828 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft ODBC and OLE DB can be exploited...

Oracle Linux 9 : .NET / 6.0 (ELSA-2023-3581)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-3581 advisory. 6.0.118-1.0.1 - Add missing Oracle Linux Runtime IDs 6.0.118-1 - Update to .NET SDK 6.0.118 and Runtime 6.0.18 - Resolves: RHBZ2212379 6.0.117-1 - Upda...

GHSA-GH24-9QJJ-MR67 Microsoft Security Advisory CVE-2023-33126: .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2023-33126: .NET Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0 and .NET 6.0. This advisory also provides guidance on what developers can do to update thei...

Microsoft Security Advisory CVE-2023-33126: .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2023-33126: .NET Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0 and .NET 6.0. This advisory also provides guidance on what developers can do to update thei...

.NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2023-33128: .NET Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0. This advisory also provides guidance on what developers can do to update their application...