The vulnerability of Visual Studio Code’s source editor lies in its use of files and directories accessible from external parties, which allows unauthorized access to protected information.

The vulnerability of Visual Studio Code’s source editor relates to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2025-32703

Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally...

CVE-2025-21264

Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2025-32702

Improper neutralization of special elements used in a command 'command injection' in Visual Studio allows an unauthorized attacker to execute code locally...

Security Updates for Microsoft Visual Studio 2022/2019 Products (May 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - Improper neutralization of special elements used in a command 'command injection' in Visual Studio allows an unauthorized attacker to execute code locally...

The vulnerability of the Microsoft Visual Studio software lies in its lack of measures to neutralize special elements used in the operating system command line, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software lies in the lack of measures taken to neutralize special elements used in the operating system command line. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Security Update for Microsoft Visual 2017 15.9 (May 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by a information disclosure vulnerability where Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally. CVE-2025-32703 Note that Ness...

dotnet: .NET and Visual Studio Spoofing Vulnerability

A flaw was found in .NET and Visual Studio. This vulnerability allows an attacker to use specially crafted input to spoof trusted content or identities, potentially misleading users or systems. This issue requires user interaction and limited privileges but can lead to unauthorized actions or...

dotnet: .NET and Visual Studio Spoofing Vulnerability

A flaw was found in .NET and Visual Studio. This vulnerability allows an attacker to use specially crafted input to spoof trusted content or identities, potentially misleading users or systems. This issue requires user interaction and limited privileges but can lead to unauthorized actions or...

dotnet: .NET and Visual Studio Spoofing Vulnerability

A flaw was found in .NET and Visual Studio. This vulnerability allows an attacker to use specially crafted input to spoof trusted content or identities, potentially misleading users or systems. This issue requires user interaction and limited privileges but can lead to unauthorized actions or...

dotnet: .NET and Visual Studio Spoofing Vulnerability

A flaw was found in .NET and Visual Studio. This vulnerability allows an attacker to use specially crafted input to spoof trusted content or identities, potentially misleading users or systems. This issue requires user interaction and limited privileges but can lead to unauthorized actions or...

dotnet: .NET and Visual Studio Spoofing Vulnerability

A flaw was found in .NET and Visual Studio. This vulnerability allows an attacker to use specially crafted input to spoof trusted content or identities, potentially misleading users or systems. This issue requires user interaction and limited privileges but can lead to unauthorized actions or...

dotnet: .NET and Visual Studio Spoofing Vulnerability

A flaw was found in .NET and Visual Studio. This vulnerability allows an attacker to use specially crafted input to spoof trusted content or identities, potentially misleading users or systems. This issue requires user interaction and limited privileges but can lead to unauthorized actions or...

dotnet: .NET and Visual Studio Spoofing Vulnerability

A flaw was found in .NET and Visual Studio. This vulnerability allows an attacker to use specially crafted input to spoof trusted content or identities, potentially misleading users or systems. This issue requires user interaction and limited privileges but can lead to unauthorized actions or...

CVE-2025-26646

A flaw was found in .NET and Visual Studio. This vulnerability allows an attacker to use specially crafted input to spoof trusted content or identities, potentially misleading users or systems. This issue requires user interaction and limited privileges but can lead to unauthorized actions or...

Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.106 and .NET Runtime 9.0.5.Securi...

Alibaba Cloud Linux 3 : 0062: .NET Core 3.1 (ALINUX3-SA-2021:0062)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0062 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-26423: .NET Core and Visual Studi...

The vulnerability of Microsoft Visual Studio, the Microsoft.NET platform, and the Build Tools for Visual Studio toolset lies in improper external control of file names or files, allowing attackers to perform spoofing attacks.

The vulnerability of Microsoft Visual Studio, the Microsoft.NET platform, and the Build Tools for Visual Studio toolset is related to improper external name handling or file path manipulation. Exploitation of this vulnerability can allow a malicious actor to perform spear-phishing attacks by...

ALSA-2025:7600 Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.106 and .NET Runtime 9.0.5.Securi...

Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.116 and .NET Runtime...