5245 matches found
CVE-2019-1077
An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability'...
CVE-2019-1077
Summary (CVE-2019-1077): A local elevation-of-privilege flaw in the Visual Studio updater service arises from improper handling of file permissions. The vulnerability allows an attacker who can log on locally to overwrite arbitrary files with XML content in the local system security context, enab...
CVE-2019-1079
An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information Disclosure Vulnerability'...
CVE-2019-1079
CVE-2019-1079 affects Microsoft Visual Studio. The vulnerability arises when Visual Studio improperly parses XML input in certain settings files, enabling an XML external entity (XXE) for information disclosure. An attacker who can entice an authenticated user to open a crafted XML file could rea...
Security Updates for Microsoft Visual Studio Products (July 2019)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files. An attacker who successfully exploited this...
Microsoft Visual Studio Elevation of Privilege Vulnerability
Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio that stems from the progra...
Microsoft Visual Studio Information Disclosure Vulnerability (CNVD-2019-22192)
Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An information disclosure vulnerability exists in Microsoft Visual Studio that stems from the progra...
Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2012 Update 5: July 9, 2019
Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2012 Update 5: July 9, 2019 Notice Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS. Note This security update appli...
Visual Studio Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions. An attacker who successfully exploited this vulnerability overwrite arbitrary files with XML content in the security context of the local system. To exploit this vulnerabilit...
Visual Studio Information Disclosure Vulnerability
An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity XXE declaration. To exploit the vulnerability, an attacker could...
Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2013 Update 5: July 9, 2019
None None...
Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2010 Service Pack 1: July 9, 2019
Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2010 Service Pack 1: July 9, 2019 Notice Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS. Note This security update...
Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2015 Update 3: July 9, 2019
None None...
Microsoft Visual Studio CVE-2019-1077 Local Privilege Escalation Vulnerability
Description Microsoft Visual Studio is prone to a local privilege-escalation vulnerability. An attackers may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Visual Studio 2017 15.9 Microsoft Visual Studio 2019 16.0 Microsoft Visual Studio 2019 16.1 Recommendations...
Microsoft Visual Studio CVE-2019-1079 XML External Entity Information Disclosure Vulnerability
Description Microsoft Visual Studio is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Visual Studio 2010 SP1 Microsoft Visual Studio 2012 Update 5 Microsoft Visual...
The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software development environment allows a malicious individual to escalate their privileges.
The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software development environment is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...
Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP and AV bypass, AMSI patched
Salsa Tools is a collection of three different tools that combined, allows you to get a reverse shell on steroids in any Windows environment without even needing PowerShell for it's execution. In order to avoid the latest detection techniques AMSI, most of the components were initially written on...
Security Updates for Microsoft Visual Studio Products (May 2019)
The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by an elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations. CVE-2019-0727 C Tenable...
CVE-2019-0727
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector...
Privilege escalation
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector...