CVE-2020-8927

CVE-2020-8927 is a buffer overflow in the Brotli library prior to 1.0.8 triggered by oversized one-shot decompression requests (copying chunks > 2 GiB), which can crash a target process. Affected: Brotli up to 1.0.7/older builds used by various ecosystems. Root cause: unsafe handling of input ...

CVE-2023-36759

CVE-2023-36759 is a Visual Studio elevation-of-privilege vulnerability. The available data indicate a LOCAL attack with HIGH impact to confidentiality, integrity, and availability, requiring user interaction and with LOW privileges needed. Affected software spans Microsoft Visual Studio family (i...

CVE-2022-24512

CVE-2022-24512 is an RCE in .NET that affects .NET 6.0, .NET 5.0, and .NET Core 3.1 due to a stack buffer overrun in the Double Parse routine. An attacker could exploit it by sending a specially crafted request over the network to execute code on the target. Remediation per connected docs: upgrad...

CVE-2020-26870

CVE-2020-26870 affects DOMPurify up to 2.0.16/2.0.17, where a serialize-parse roundtrip can alter the DOM (namespace changes HTML→MathML, e.g., nesting FORM elements), enabling a mutation XSS. The issue is documented by Cure53 and linked analyses; a fix was released with DOMPurify 2.0.17. Related...

CVE-2023-36042

CVE-2023-36042 is a Microsoft .NET Framework-related Denial of Service vulnerability. Connected sources show that multiple monthly security updates (KB5034276/KB5034274/KB5034275/KB5033920–KB5033910 family) address this issue across Windows 10/11, Azure Stack HCI, and server variants by applying ...

CVE-2021-1721

CVE-2021-1721 is a denial-of-service vulnerability in dotnet-core/.NET Core prior to 3.1.12 affecting HTTPS web requests during X509 certificate chain building. Multiple sources (Arch Linux advisories ASA-202103-17 and ASA-202103-16) describe the impact as a denial of service, with upgrade paths ...

CVE-2019-1077

Summary (CVE-2019-1077): A local elevation-of-privilege flaw in the Visual Studio updater service arises from improper handling of file permissions. The vulnerability allows an attacker who can log on locally to overwrite arbitrary files with XML content in the local system security context, enab...

CVE-2024-29060

CVE-2024-29060 is an elevation of privilege vulnerability in Microsoft Visual Studio family. The CVE affects multiple VS versions (e.g., Visual Studio 2017–2022 lineups) with a root cause described across sources as an elevation of privileges vulnerability that can be exploited to gain higher pri...

CVE-2019-1486

The CVE-2019-1486 entry describes a spoofing vulnerability in Microsoft Visual Studio Live Share: when a guest joins a Live Share session, the host can redirect the guest to an arbitrary URL, potentially causing the guest’s browser to navigate to that URL without consent. Affected products includ...

CVE-2019-1425

CVE-2019-1425 (Visual Studio Elevation of Privilege Vulnerability) : The issue arises when Visual Studio fails to properly validate hardlinks during extraction of archived files. Root cause is improper hardlink validation introduced via npm-packages (tar and fstream) used by Visual Studio. Exploi...