PT-2026-111953

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Visual Studio affected versions not specified Description An issue involving type confusion, which occurs when a program uses a resource with a type that is incompatible with the expected type, allows an...

PT-2026-111939

Name of the Vulnerable Software and Affected Versions Visual Studio Code versions prior to 1.141.1 Description Incorrect privilege assignment occurs when MCP sandboxing is enabled, allowing an authorized attacker to bypass a security feature locally. The issue arises because approvals for network...

PT-2026-112217

🚨 CVE-2026-70098 Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. 🎖@cveNotify...

PT-2026-111805

Name of the Vulnerable Software and Affected Versions Visual Studio Tools for Applications affected versions not specified SQL Server Management Studio affected versions not specified Visual Studio Copilot extension affected versions not specified Description Improper control of code generation...

PT-2026-112052

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

Microsoft Visual Studio: CVE-2026-70162: .NET Denial of Service Vulnerability

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...

Microsoft .NET Framework: CVE-2026-102869: .NET and Visual Studio Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

Microsoft VS Code: CVE-2026-102851: Visual Studio Code Security Feature Bypass Vulnerability

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...

Microsoft Visual Studio: CVE-2026-85790: Microsoft QUIC Information Disclosure Vulnerability

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...

Microsoft VS Code: CVE-2026-69370: Visual Studio Code Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

Microsoft VS Code: CVE-2026-70098: Visual Studio Code Remote Code Execution Vulnerability

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...

Microsoft VS Code: CVE-2026-102238: Visual Studio Code Remote Code Execution Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

Microsoft VS Code: CVE-2026-102235: Visual Studio Code Remote Code Execution Vulnerability

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network...

Microsoft VS Code: CVE-2026-102234: Visual Studio Code Security Feature Bypass Vulnerability

Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

Microsoft VS Code: CVE-2026-102233: Visual Studio Code Security Feature Bypass Vulnerability

Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

Microsoft VS Code: CVE-2026-102232: Visual Studio Code Security Feature Bypass Vulnerability

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

Microsoft VS Code: CVE-2026-102229: Visual Studio Code Information Disclosure Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an authorized attacker to disclose information over a network...

Microsoft Visual Studio: CVE-2026-103572: Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

PT-2026-118121

Уязвимость редактора исходного кода Microsoft Visual Studio Code связана с некорректным кодированием или экранированием выходных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

PT-2026-118116

Уязвимость редактора исходного кода Microsoft Visual Studio Code связана с недостатком процедуры авторизации. Эксплуатация уязвимости может позволить нарушителю обойти ограничения безопасности...