Microsoft Visual Studio and Microsoft .NET security vulnerabilities

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

PT-2023-9611

Name of the Vulnerable Software and Affected Versions Microsoft .NET and Visual Studio affected versions not specified Description The issue is related to a use-after-free memory vulnerability in the Microsoft .NET platform and the Visual Studio source code editor. Exploitation of this issue may...

PT-2023-3137 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can allow an attacker to conduct spoofing attacks. There is no information provid...

UBUNTU-CVE-2023-24936

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...

UBUNTU-CVE-2023-29331

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability...

UBUNTU-CVE-2023-33128

.NET and Visual Studio Remote Code Execution Vulnerability...

Microsoft .NET Core security vulnerabilities

Microsoft .NET Core is a cross-platform, high-performance, open-source framework for building modern, cloud-enabled, Internet-connected applications from Microsoft Corporation. A security vulnerability exists in Microsoft .NET Core. The following products and versions are affected: Microsoft Visu...

Microsoft .NET Framework and Microsoft Visual Studio security vulnerabilities

Microsoft Visual Studio is a family of development tool suites and a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET Framework is a comprehensive and consistent programming model and development platform for building...

PT-2023-3299

Name of the Vulnerable Software and Affected Versions .NET, .NET Framework, and Visual Studio affected versions not specified Description The issue is related to insufficient access control in Microsoft's .NET Framework, .NET, and Visual Studio, allowing an attacker to elevate their privileges...

CVE-2023-32032

.NET and Visual Studio Elevation of Privilege Vulnerability...

Microsoft Visual Studio and Microsoft .NET security vulnerabilities

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

PT-2023-3217 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to gain unauthorized access to protected information. Recommendations: At the moment, there is no...

Microsoft .NET security vulnerabilities

Microsoft .NET is a software framework from Microsoft Corporation USA dedicated to agile software development, rapid application development, platform-agnosticism, and web transparency. A security vulnerability exists in Microsoft .NET and Visual Studio. An attacker could exploit the vulnerabilit...

CVE-2023-3208

A vulnerability, which was classified as critical, has been found in RoadFlow Visual Process Engine .NET Core Mvc 2.13.3. Affected by this issue is some unknown functionality of the file /Log/Query?appid=0B736354-9473-4D66-B9C0-15CAC149EB05&tabid=tab0B73635494734D66B9C015CAC149EB05 of the compone...

CVE-2023-3208

A vulnerability, which was classified as critical, has been found in RoadFlow Visual Process Engine .NET Core Mvc 2.13.3. Affected by this issue is some unknown functionality of the file /Log/Query?appid=0B736354-9473-4D66-B9C0-15CAC149EB05&tabid=tab0B73635494734D66B9C015CAC149EB05 of the compone...

Sql injection

A vulnerability, which was classified as critical, has been found in RoadFlow Visual Process Engine .NET Core Mvc 2.13.3. Affected by this issue is some unknown functionality of the file /Log/Query?appid=0B736354-9473-4D66-B9C0-15CAC149EB05&tabid=tab0B73635494734D66B9C015CAC149EB05 of the compone...

CVE-2023-3208

CVE-2023-3208 affects RoadFlow Visual Process Engine .NET Core MVC 2.13.3. The issue is in the Login component, where manipulation of the sidx/sord arguments in the endpoint "/Log/Query?appid=..." leads to a SQL injection. The vulnerability is exploitable remotely, and public exploits have been d...

CVE-2023-3208 RoadFlow Visual Process Engine .NET Core Mvc Login sql injection

A vulnerability, which was classified as critical, has been found in RoadFlow Visual Process Engine .NET Core Mvc 2.13.3. Affected by this issue is some unknown functionality of the file /Log/Query?appid=0B736354-9473-4D66-B9C0-15CAC149EB05&tabid=tab0B73635494734D66B9C015CAC149EB05 of the compone...

Researchers Uncover Publisher Spoofing Bug in Microsoft Visual Studio Installer

Security researchers have warned about an "easily exploitable" flaw in the Microsoft Visual Studio installer that could be abused by a malicious actor to impersonate a legitimate publisher and distribute malicious extensions. "A threat actor could impersonate a popular publisher and issue a...

Researchers Uncover Publisher Spoofing Bug in Microsoft Visual Studio Installer

Security researchers have warned about an "easily exploitable" flaw in the Microsoft Visual Studio installer that could be abused by a malicious actor to impersonate a legitimate publisher and distribute malicious extensions. "A threat actor could impersonate a popular publisher and issue a...