CVE-2024-30052

This repository hosts materials related to CVE-2024-30052. More details about the vulnerability can be found in my blog post. structure builder folder contains source files for a program that crafts a dump file that exploits the vulnerability. poc folder contains three proof-of-concept files that...

CVE-2022-24521

CVE-2022-24521 CVE-2022-24521 PoC win10 21h2 19044.1620 win11 21h2 22000.593 Compilation Basic Information Windows SDK Version: 10.0 latest installed version Platform Toolset: Visual Studio 2022 v143 C++ Language Standard: Default ISO C++14 Standard...

CVE-2026-20820

CVE-2026-20820 winver win1021h219044.6693amd64 win1123h222631.6345amd64 Build basic information Windows SDK version: 10.0 latest installed version Platform toolset: Visual Studio 2022 v143 C++ language standard: Default ISO C++14 standard...

Spartacus

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/Spartacus for the latest version. Spartacus DLL/COM Hijacking Toolkit Why "Spartacus"? If you have seen the film Spartacus from 1960, you will remember the scene where the Romans are asking for Spartacus to give himself up. The...

CVE-2024-35250-BOF

CVE-2024-35250-BOF Beacon Object File BOF implementation for CVE-2024-35250. Build The project template is from bof-vs. Compile using the Release configuration in Visual Studio 2019/2022. Credits https://github.com/varwara/CVE-2024-35250...

CVE-2026-102869

A flaw was found in .NET and Visual Studio. A remote attacker could achieve privilege escalation by exploiting a type confusion vulnerability, which occurs when the software accesses a resource using an incompatible data type. Successful exploitation requires user interaction and may allow an...

Microsoft Visual Studio Code Editor Code Execution

The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Visual Studio Code Path Traversal

The vulnerability of Microsoft Visual Studio Code’s source editor is related to incorrect resolution of path equivalence. Exploiting this vulnerability could allow an attacker to bypass security restrictions...

Microsoft Visual Studio Code Source Editor Auth Bypass

The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of authentication procedures. Exploiting this vulnerability could allow a hacker to bypass security restrictions...

Microsoft Visual Studio Code Editor Auth Bypass

The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of authentication procedures. Exploiting this vulnerability could allow an attacker to bypass security restrictions...

Microsoft Visual Studio Code Editor Auth Bypass

The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Visual Studio Code Editor Code Execution

The vulnerability of Microsoft Visual Studio Code’s editor is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Microsoft Visual Studio Code Editor Security Decisioning

The vulnerability of Microsoft Visual Studio Code’s editor is related to the use of unreliable input data when making security decisions. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

SQL Server Management Studio Code Execution

The vulnerability of the SQL Server Management Studio SSMS and the Visual Studio Tools for Applications VSTA environment used in Microsoft Visual Studio development tools is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary co...

Microsoft Visual Studio Code Editor Path Traversal

The vulnerability of Microsoft Visual Studio Code’s editor is related to incorrect path name restrictions for restricted access directories. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

Microsoft Visual Studio Code Editor Code Execution

The vulnerability of Microsoft Visual Studio Code’s editor is related to incorrect encoding or escaping of output data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

KLA91352 Multiple vulnerability in Microsoft Developer Tools

Multiple vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to cause denial of service, spoof user interface. Original advisories CVE-2026-109468 Exploitation Related products Microsoft-Visual-Studio CVE list CVE-2026-109468 critical Solution...

Security Updates for Microsoft Visual Studio Products 17.14.42 and 18.10.4 (October 2026)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network. CVE-2026-105016 - Inconsistent interpretation of http requests...

Security Update for Microsoft Visual Studio Code (October 2026)

The remote host has an application installed that is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network. CVE-2026-102235 - Improper...

CVE-2026-54703

Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the crossnote.updateMarkdown command in Markdown Preview Enhanced accepts an arbitrary URI and attacker-controlled content, then passes them to vscode.workspace.fs.writeFile without validating that...