10222 matches found
BIT-MONGODB-2026-84967 Arbitrary command execution via shell-expanded connection string in Launch MongoDB Shell terminal
A component of the MongoDB extension for Visual Studio Code does not neutralize special characters in a connection string before that value is placed into a command line the extension composes for an integrated terminal. An unauthenticated remote unauthorized-user who persuades a developer to...
vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling
A vulnerability in Vim's shell script plugins sh.vim, zsh.vim, ps1.vim allows arbitrary code execution if a user selects maliciously crafted text in Visual mode and triggers a keyword lookup, due to improperly escaped shell metacharacters...
EUVD-2026-73170
Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability...
EUVD-2026-73720
Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability...
EUVD-2026-73781
Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability...
CyberStrikeAI v1.7.18
CyberStrikeAI 中文 | English The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next. CyberStrikeAI connects planning, execution, human oversight, evidence, and replay in one auditable...
Linux Distros Unpatched Vulnerability : CVE-2026-69522
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. CVE-2026-69522 Note that Nessus relies on the presen...
Linux Distros Unpatched Vulnerability : CVE-2026-71328
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. CVE-2026-71328 Note that Nessus relies on the presen...
Microsoft Visual Studio Products (September 2026)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. CVE-2026-69439 - Heap-based buffer overflow in...
CVE-2026-21113: Improper Export of Android Application Components
Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission...
Linux Distros Unpatched Vulnerability : CVE-2026-69439
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. CVE-2026-69439 Note that Nessus relie...
Security Update for Microsoft Visual Studio Code (September 2026)
The remote host has an application installed that is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-784...
vulnerabilities handled in Microsoft Developer Tools
Microsoft has identified 15 vulnerabilities in various Developer Tools. A malicious individual could exploit these vulnerabilities to carry out attacks that can cause damage, as listed in the table below. The most severe vulnerability, with the identifier CVE-2026-81376, has a CVSS score of 9.6. ...
Duplicate Advisory: Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-63gh-g2x5-x69v. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
Duplicate Advisory: Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2j8r-3c22-8565. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
Duplicate Advisory: Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-527h-q9f6-p7qx. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a...
CVE-2026-81379
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-81383
Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network...