Spoofing

Visual Studio Spoofing Vulnerability...

Remote code execution

Visual Studio Remote Code Execution Vulnerability...

Information disclosure

Visual Studio Information Disclosure Vulnerability...

Remote code execution

Visual Studio Code Remote Code Execution Vulnerability...

Privilege escalation

Visual Studio Elevation of Privilege Vulnerability...

CVE-2023-28299

CVE-2023-28299 is the Visual Studio Spoofing Vulnerability. Connected sources indicate this affects Microsoft Visual Studio tooling and related components, with the NCSC entry mapping CVE-2023-28299 to an impersonation (spoofing) impact and noting PoCs exist for several related CVEs. The vulnerab...

CVE-2023-28299 Visual Studio Spoofing Vulnerability

...

CVE-2023-28296

CVE-2023-28296 is a Microsoft Visual Studio remote code execution vulnerability with multiple affected products (Visual Studio 2022/2019, .NET components, and Visual Studio Code). The root cause is not explicitly detailed here, but the CVSSv3.1 scores it as a high-severity, locally exploitable is...

CVE-2023-28296 Visual Studio Remote Code Execution Vulnerability

...

CVE-2023-28262 Visual Studio Elevation of Privilege Vulnerability

...

CVE-2023-28263 Visual Studio Information Disclosure Vulnerability

...

CVE-2023-28262 Visual Studio Elevation of Privilege Vulnerability

...

CVE-2023-28263

CVE-2023-28263 is described as a Visual Studio Information Disclosure Vulnerability. The associated records show a Medium base score (CVSS v3.1: 5.5) with Local attack vector, Low attack complexity, Low privileges required, and a High confidentiality impact, with no explicit exploitation details ...

CVE-2023-28263 Visual Studio Information Disclosure Vulnerability

...

CVE-2023-28262

CVE-2023-28262 is a Microsoft Visual Studio elevation of privilege vulnerability. Several connected sources (e.g., NCSC advisories) confirm a privilege-escalation flaw affecting multiple Visual Studio products, including various Visual Studio versions (e.g., 2017/2019/2022 lines) and Visual Studi...

CVE-2023-24893

CVE-2023-24893 affects Visual Studio Code; versions prior to 1.77.2 are vulnerable to remote code execution. An attacker could bypass authentication and execute arbitrary commands. Remediation: update VS Code to 1.77.2 or later per Nessus plugin details. Other sources corroborate RCE vectors for ...

CVE-2023-24893 Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2023-24893 Visual Studio Code Remote Code Execution Vulnerability

...

Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages

Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious NuGet packages as part of a supply chain attack targeting .NET developers. The sophisticated typosquatting campaign, which was uncovered by JFrog late last month,...

Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages

Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious NuGet packages as part of a supply chain attack targeting .NET developers. The sophisticated typosquatting campaign, which was uncovered by JFrog late last month,...