10222 matches found
PT-2026-88060
VULN-196220 is now CVE-2026-81376. It is a very simple and very dangerous vulnerability that allows code execution when opening untrusted code in sandboxed untrusted mode. Please update ASAP!...
PT-2026-88059
Server-side request forgery ssrf in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-69522: Heap-based Buffer Overflow
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
PT-2026-88061
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to perform tampering over a network...
PT-2026-87822
Microsoft Security Advisory CVE-2026-71328 ā .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...
PT-2026-88062
Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-78461: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-87981
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
CVE-2026-81379: Not Failing Securely
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-87980
šØ CVE-2026-77906 Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. š@cveNotify...
PT-2026-88063
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-87538
@deskmodder Important context: CVE-2026-69522 is a UI:R crafted-file RCE in this servicing set. If Visual Studio is in the environment, pair the .NET bumps with VS 2026 18.9.3 or VS 2022 17.14.40...
PT-2026-87468
Name of the Vulnerable Software and Affected Versions Microsoft.DiaSymReader.Native versions 17.10.0-beta1.24272.1 through 18.9.0-beta1.26405.1 Description A heap-based buffer overflow exists in .NET and Visual Studio, specifically within Microsoft.DiaSymReader.Native. This issue occurs due to an...
CVE-2026-81381: Insufficiently Protected Credentials
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-81380: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-78462: Authorization Bypass Through User-Controlled Key
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-77906: Heap-based Buffer Overflow
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
PT-2026-87797
Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
PT-2026-88058
Inconsistent interpretation of http requests 'http request/response smuggling' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...