146 matches found
CVE-2024-38168
CVE-2024-38168 is a Windows-only Denial of Service vulnerability in .NET and ASP.NET/HTTP.sys affecting .NET 8.0 runtimes prior to 8.0.8 (and related ASP.NET packages). The issue arises when an unauthenticated client sends requests that trigger the HTTP.sys DoS condition. Microsoft’s advisory lis...
CVE-2021-43877
CVE-2021-43877 is an elevation-of-privilege vulnerability reported for ASP.NET Core (and Visual Studio) . The primary sources in the connected documents identify it by title as an “Elevation of Privilege” issue without providing explicit technical details in the text here. NVD data in the initial...
CVE-2025-26682
CVE-2025-26682 affects ASP.NET Core and Visual Studio components. The root cause is Allocation of resources without limits or throttling, allowing an unauthorized network attacker to cause a Denial of Service. The issue is referenced across multiple advisories (e.g., NVD/MSRC/MS Knowledge Base) a...
CVE-2024-43603
CVE-2024-43603 is a Denial of Service vulnerability in the Visual Studio Diagnostics Hub Standard Collector (Visual Studio Collector Service). The MS security update description confirms a DoS in Diagnostics Hub Standard Collector when handling certain file operations. Remediations are provided v...
CVE-2026-47304
The CVE-2026-47304 entry concerns a vulnerability in .NET (System.Security.Cryptography.Xml) where the XML Encryption (EncryptedXml) implementation has an improper verification of cryptographic signatures. The issue affects multiple .NET package lines (notably .NET 8.x, 9.x and 10.x) with affecte...
CVE-2022-41119
CVE-2022-41119 concerns Microsoft Visual Studio Remote Code Execution. Connected sources describe it as a Visual Studio vulnerability leading to arbitrary code execution, attributed to insufficient input validation in Visual Studio and affecting multiple VS versions (including 2017/2019 and 2022 ...
CVE-2025-21405
CVE-2025-21405 is a Microsoft Visual Studio elevation-of-privilege vulnerability. Affected: Visual Studio and related developer tools; root cause is elevation of privileges in the Visual Studio/.NET stack. Impact: local privilege escalation with high confidentiality/integrity/availability risk (p...
CVE-2023-28263
CVE-2023-28263 is described as a Visual Studio Information Disclosure Vulnerability. The associated records show a Medium base score (CVSS v3.1: 5.5) with Local attack vector, Low attack complexity, Low privileges required, and a High confidentiality impact, with no explicit exploitation details ...
CVE-2026-50524
CVE-2026-50524 is a .NET Framework Denial of Service vulnerability caused by improper validation of a specified input type. The issue can allow an unauthenticated attacker to disrupt service over a network without requiring user interaction; impact is described as a network-based DoS with high se...
CVE-2026-62886
CVE-2026-62886: integer overflow/wraparound in .NET allows local privilege escalation; affected component is .NET. Root cause: integer overflow. Exploitation details and fixes are not provided in the attached documents; consult the Microsoft update guide for remediation if available.
CVE-2025-29804
CVE-2025-29804 is an elevation-of-privilege vulnerability in Microsoft Visual Studio caused by improper access control. A local attacker with LOW privileges and requiring user interaction could elevate privileges on affected Visual Studio components. Public notes reference affected Visual Studio ...
CVE-2025-29802
CVE-2025-29802 (Visual Studio Elevation of Privilege) is a local elevation-of-privilege vulnerability in Microsoft Visual Studio caused by improper access control. The issue affects Visual Studio-related components (e.g., Visual Studio 2022 up to version 17.12 and related tooling) and can be expl...
CVE-2023-21567
CVE-2023-21567 is a Microsoft Visual Studio denial-of-service vulnerability. Connected sources confirm it affects Visual Studio and related developer tools, with CVSSv3.1 base score 5.6 (Medium) and a local attack vector requiring user interaction. Public documents describe a DoS impact and list ...
CVE-2025-24998
CVE-2025-24998 is an Elevation of Privilege vulnerability in Visual Studio caused by an Uncontrolled search path element. A local attacker with low privileges and user interaction can potentially escalate to higher privileges. CVSSv3 base score 7.3 (HIGH); impact on confidentiality, integrity, an...
CVE-2026-50525
CVE-2026-50525 is a .NET Denial of Service vulnerability described as allocation of resources without limits/throttling that can allow an unauthenticated attacker to cause network-based service disruption. Connected sources confirm impact on Microsoft components including .NET and related Develop...
CVE-2024-29060
CVE-2024-29060 is an elevation of privilege vulnerability in Microsoft Visual Studio family. The CVE affects multiple VS versions (e.g., Visual Studio 2017–2022 lineups) with a root cause described across sources as an elevation of privileges vulnerability that can be exploited to gain higher pri...
CVE-2025-25003
CVE-2025-25003 affects Visual Studio and is described as an Elevation of Privilege vulnerability caused by an Uncontrolled search path element. The CVE entry indicates local privilege escalation with high impact; exploitation details are not provided in the documents. Microsoft has published upda...
CVE-2025-49739
CVE-2025-49739: Visual Studio elevation of privilege due to improper link resolution before file access ("link following"). The issue could allow a network-access attacker to elevate privileges on a affected machine. Connected sources indicate this CVE has public exploits (per Kaspersky entry in ...
CVE-2025-21206
The CVE-2025-21206 issue concerns the Visual Studio installers with an elevation-of-privilege vulnerability. A concrete root cause mentioned in connected PT-2025-6298 is an uncontrolled search path element affecting the Visual Studio Installer, which could allow a local attacker to gain higher pr...
CVE-2026-32178
CVE-2026-32178 affects .NET’s System.Net.Mail parsing and enables spoofing over the network. Connected advisories confirm impact across .NET 8/9/10 and list fixed versions: .NET 8.0.26, 9.0.15, and 10.0.6 (SDKs/Runtimes). Mitigation is to upgrade affected runtimes/SDKs to these patched versions o...
CVE-2024-30052
CVE-2024-30052 affects Microsoft Visual Studio and is described as a remote code execution vulnerability with a CVSS v3.1 base score of 4.7 (Medium). The metrics indicate LOCAL exploitation, user interaction required, HIGH integrity impact, and no confidentiality impact. Connected sources corrobo...
CVE-2026-62899
CVE-2026-62899 involves inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in .NET, allowing an unauthenticated attacker to bypass a security feature over a network. The vulnerability affects .NET components handling HTTP semantics and could allow bypassing safeguards ...
CVE-2026-62901
The CVE-2026-62901 entry describes a denial-of-service (DoS) vulnerability in .NET due to unchecked input for a loop condition, enabling an unauthenticated network attacker to cause service disruption. The available data notes network access, low attack complexity, and no privileges or user inter...
CVE-2025-32702
CVE-2025-32702 is a Visual Studio command-injection vulnerability (Improper neutralization of special elements used in a command) that allows local code execution. Affected products include Microsoft Visual Studio 2019/2022 and related Build Tools; attack vector is LOCAL with LOW complexity, req...
CVE-2025-32703
CVE-2025-32703 (Visual Studio) is an information-disclosure vulnerability caused by insufficient granularity of access control in Visual Studio, enabling an authorized, local attacker to disclose information. The vulnerability affects multiple Visual Studio releases (2017 15.x, 2019 16.x, 2022 17...
CVE-2026-50648
CVE-2026-50648 describes a denial-of-service in .NET Framework caused by allocation of resources without limits or throttling. The CVE is network-exploitable (attack vector: network, privileges: none, user interaction: none) with an attacker able to exhaust resources and disrupt service. The NVD ...
CVE-2026-62900
CVE-2026-62900 concerns a .NET information disclosure vulnerability caused by improper removal of sensitive information before storage or transfer. The issue enables an attacker to disclose data over a network (CVSS v3.1: 5.9 MEDIUM; Network, High attack complexity, No privileges required, No use...
CVE-2026-62898
CVE-2026-62898 describes a use-after-free in Microsoft QUIC that enables an unauthenticated attacker to disclose information over the network. The connected documents confirm the vulnerability type and impact (information disclosure) but do not provide affected versions, impacted components beyon...
CVE-2026-21256
CVE-2026-21256 affects GitHub Copilot and Visual Studio. It is a command injection vulnerability described as improper neutralization of special elements in a command, enabling code execution over a network. CVSS 3.1 base score 8.8 (HIGH) with NETWORK attack vector, no privileges, user interactio...
CVE-2026-32203
CVE-2026-32203 is listed in the connected Nessus advisories as a Denial of Service via stack overflow affecting .NET components across multiple Linux distributions. The provided documents do not specify exact affected versions, vulnerable component details, exploit methods, or remediation steps.
CVE-2026-50528
CVE-2026-50528 is a .NET security feature bypass vulnerability (Incorrect authorization) that enables a network attacker to bypass a security feature. The NCSC advisory and MITRE listing in the CVE community indicate it is categorized as a bypass of security measures with an 8.2–8.20 base score i...
CVE-2024-49044
CVE-2024-49044 is an Elevation of Privilege issue affecting Microsoft Visual Studio. Connected sources corroborate it as a Visual Studio privilege-escalation vulnerability; exact root cause and affected product versions are not fully enumerated in the provided documents. The NVD/NCSC entries labe...
CVE-2026-62871
The CVE-2026-62871 entry describes an out-of-bounds write in .NET that could allow an unauthorized attacker to execute code locally. Documented impact is high (C:H/I:H/A:H) with local attack vector and required user interaction. The provided sources do not specify affected versions, root cause be...
CVE-2025-47959
CVE-2025-47959 is a Visual Studio remote code execution bug caused by improper neutralization of command elements (command injection). Affects Visual Studio components exposed over network; attacker with network access and low privileges, but user interaction is required per the CVSS, enabling co...
CVE-2026-47303
CVE-2026-47303 affects ASP.NET Core. Authentication bypass by assumed-immutable data enables an authorized attacker to elevate privileges over a network. From the provided metrics, the CVSS v3.1 base score is 8.8 (HIGH) with Network attack vector, Low attack complexity, Privileges Required: LOW, ...
CVE-2026-50646
CVE-2026-50646 affects the .NET Framework. The vulnerability is a protection mechanism failure that could allow an unauthenticated local attacker to execute code on the affected system (attack vector: LOCAL; privileges required: NONE; user interaction required). The CVSS 3.1 base score is 7.8 (HI...
CVE-2026-21257
CVE-2026-21257 affects GitHub Copilot and Visual Studio. It involves improper neutralization of special elements used in a command (command injection), enabling an authorized attacker to elevate privileges over a network. Root cause: inadequate input handling in command construction. Impact per C...
CVE-2026-50526
CVE-2026-50526 describes an issue in .NET where improper link resolution before file access ("link following") can allow an authorized local attacker to tamper with files. Multiple sources document the same description and note a local attack vector with high impact on confidentiality, integrity,...
CVE-2025-55240
CVE-2025-55240 is a Visual Studio elevation-of-privilege issue described as an improper access control that lets an authorized attacker escalate to full local privileges. CVSS indicates local attack, low attack complexity, required low privileges, and user interaction, with high impact on confide...
CVE-2026-50527
CVE-2026-50527 is a stack-based buffer overflow in the .NET Framework that can allow an unauthenticated, network-based attacker to cause denial of service. The vulnerability affects the .NET Framework components handling network input; exploitation leads to an out-of-bounds write with service dis...
CVE-2026-50651
CVE-2026-50651 is a .NET Denial of Service vulnerability associated with an HTTP/2 SETTINGS/PING ACK flood that can lead to out-of-memory conditions. Public descriptions identify the impact as denial of service over a network, with a CVSS v3.1 base score of 7.5 (Network, Low attack complexity, No...
CVE-2026-50659
CVE-2026-50659 is a .NET spoofing vulnerability caused by improper encoding/escaping of output, enabling an authorized attacker to perform network spoofing. Affected: .NET across multiple updates; exploitation status is not detailed in the provided documents. Remediation: Microsoft has released u...
CVE-2026-62909
The CVE-2026-62909 entry concerns an uncaught exception in .NET that allows an authorized attacker to locally elevate privileges. Affected software is the .NET framework/component referenced in the CVE description. The impact is elevation of privilege with a high base score (CVSS 3.1: 7.8, HIGH),...
CVE-2026-62902
CVE-2026-62902 concerns a .NET information-disclosure issue arising from inclusion of functionality from an untrusted control sphere. The vulnerability allows an unauthenticated attacker to disclose information over a network, with an attack vector over the network, required user interaction, and...
CVE-2025-62214
CVE-2025-62214 is a Visual Studio remote code execution vulnerability stemming from improper neutralization of special elements in a command, enabling локally authenticated code execution. According to the CVE records, the issue affects Visual Studio and is assigned CVSS 3.1: Local, High impact o...