Microsoft Visual Studio and Microsoft .NET Security Vulnerabilities

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

PT-2023-5048

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio affected versions not specified Description The issue is related to insufficient input validation in Microsoft Visual Studio, allowing an attacker to execute arbitrary code. This can affect the system and potentially le...

CVE-2023-36793

Visual Studio Remote Code Execution Vulnerability...

vscode -- VS Code Remote Code Execution Vulnerability

VSCode developers report: Visual Studio Code Remote Code Execution Vulnerability A remote code execution vulnerability exists in VS Code 1.82.0 and earlier versions that working in a maliciously crafted package.json can result in executing commands locally. This scenario would require the attacke...

OpenText Visual COBOL License Issue Vulnerability

OpenText Visual COBOL is an integrated development environment IDE from OpenText Corporation designed to support the development and maintenance of the COBOL programming language. A security vulnerability exists in OpenText Visual COBOL and COBOL Server that stems from the fact that when user...

PT-2023-5471

Name of the Vulnerable Software and Affected Versions .NET Core and Visual Studio affected versions not specified Description The issue is related to a Denial of Service vulnerability in .NET Core and Visual Studio. It involves an uncontrolled consumption of resources. Exploitation of this issue...

SAP PowerDesigner code injection vulnerability

SAP PowerDesigner is a database design software from SAP Germany. A code injection vulnerability exists in SAP PowerDesigner version 16.7 that originates from allowing an unauthenticated attacker to inject VBScript code into a document. An attacker could exploit this vulnerability to cause...

PT-2023-5049

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio affected versions not specified Description The issue is related to insufficient input validation in Microsoft Visual Studio, which can allow an attacker to execute arbitrary code. This can potentially lead to remote co...

PT-2023-5059

Name of the Vulnerable Software and Affected Versions Visual Studio affected versions not specified Description The issue is related to insufficient input validation in Visual Studio, which can be exploited to execute arbitrary code. This can allow an attacker to run malicious code on the system...

PT-2023-5094 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to insufficient access restrictions in Microsoft Visual Studio, allowing an attacker to elevate their privileges using a specially crafted file. Recommendations: ...

CVE-2023-4501: Improper Authentication

User authentication with username and password credentials is ineffective in OpenText Micro Focus Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server including product variants such as Enterprise Test Server, versions 7.0 patch updates 19 and 20, 8.0 patch updates 8 and 9, and...

CVE-2023-36793: Heap-based Buffer Overflow

Visual Studio Remote Code Execution Vulnerability...

CVE-2023-36799: Uncontrolled Resource Consumption

.NET Core and Visual Studio Denial of Service Vulnerability...

CVE-2023-36759: Untrusted Pointer Dereference

Visual Studio Elevation of Privilege Vulnerability...

CVE-2023-36792: Integer Overflow or Wraparound

Visual Studio Remote Code Execution Vulnerability...

CVE-2023-36794: Integer Underflow (Wrap or Wraparound)

Visual Studio Remote Code Execution Vulnerability...

CVE-2023-36796: Integer Underflow (Wrap or Wraparound)

Visual Studio Remote Code Execution Vulnerability...

CVE-2023-36742: Undefined Security Weakness

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2023-36758: Improper Link Resolution Before File Access

Visual Studio Elevation of Privilege Vulnerability...

PT-2023-5065 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient input validation in Visual Studio Code, allowing an attacker to execute arbitrary code using a specially crafted file. Recommendations: At th...