6182 matches found
CVE-2023-28262
CVE-2023-28262 is a Microsoft Visual Studio elevation of privilege vulnerability. Several connected sources (e.g., NCSC advisories) confirm a privilege-escalation flaw affecting multiple Visual Studio products, including various Visual Studio versions (e.g., 2017/2019/2022 lines) and Visual Studi...
CVE-2023-28262 Visual Studio Elevation of Privilege Vulnerability
...
CVE-2023-24893 Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2023-24893
CVE-2023-24893 affects Visual Studio Code; versions prior to 1.77.2 are vulnerable to remote code execution. An attacker could bypass authentication and execute arbitrary commands. Remediation: update VS Code to 1.77.2 or later per Nessus plugin details. Other sources corroborate RCE vectors for ...
CVE-2023-24893 Visual Studio Code Remote Code Execution Vulnerability
...
Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages
Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious NuGet packages as part of a supply chain attack targeting .NET developers. The sophisticated typosquatting campaign, which was uncovered by JFrog late last month,...
Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages
Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious NuGet packages as part of a supply chain attack targeting .NET developers. The sophisticated typosquatting campaign, which was uncovered by JFrog late last month,...
Visual Studio Spoofing Vulnerability
...
Visual Studio Remote Code Execution Vulnerability
...
Visual Studio Information Disclosure Vulnerability
...
Visual Studio Elevation of Privilege Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
PT-2023-2289 · Microsoft · Visual Studio
Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to gain unauthorized access to protected information. Recommendations: At the moment, there is no...
CVE-2023-24893: Improper Input Validation
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2023-28263: Improper Null Termination
Visual Studio Information Disclosure Vulnerability...
CVE-2023-28262: Heap-based Buffer Overflow
Visual Studio Elevation of Privilege Vulnerability...
PT-2023-2432 · Microsoft +1 · Visual Studio +2
Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Microsoft Visual Studio Code affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visual Studio, which can allow an attacker to...
PT-2023-2312 · Microsoft · Visual Studio
Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visual Studio, which can be exploited to execute arbitrary code. Recommendations: At the moment, there is ...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed vulnerabilities in Microsoft Developer Tools. A malicious party could exploit the vulnerabilities to gain access to sensitive data, obtain elevated privileges or execute arbitrary code. To do so the malicious party must have access to a system on which the vulnerable...