NotCVE - vendor:"Microsoft" product:"Microsoft Visual Studio 2022 Version 17.8"

Page 3 of 39 results (0.004 seconds)

CVSS: 7.3EPSS: 0%CPEs: 15EXPL: 0

CVE-2024-38081 – .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

https://notcve.org/view.php?id=CVE-2024-38081

09 Jul 2024 — .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38081 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 10.0EPSS: 10%CPEs: 13EXPL: 0

CVE-2024-35272 – SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2024-35272

09 Jul 2024 — SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35272 • CWE-122: Heap-based Buffer Overflow •

CVSS: 4.7EPSS: 1%CPEs: 6EXPL: 1

CVE-2024-30052 – Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2024-30052

11 Jun 2024 — Visual Studio Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Visual Studio • https://github.com/ynwarcs/CVE-2024-30052 • CWE-693: Protection Mechanism Failure •

CVSS: 6.8EPSS: 0%CPEs: 6EXPL: 0

CVE-2024-29060 – Visual Studio Elevation of Privilege Vulnerability

https://notcve.org/view.php?id=CVE-2024-29060

11 Jun 2024 — Visual Studio Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios en Visual Studio • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29060 • CWE-284: Improper Access Control •

CVSS: 5.9EPSS: 0%CPEs: 6EXPL: 0

CVE-2024-30046 – Visual Studio Denial of Service Vulnerability

https://notcve.org/view.php?id=CVE-2024-30046

14 May 2024 — Visual Studio Denial of Service Vulnerability Vulnerabilidad de denegación de servicio de Visual Studio A flaw was found in ASP.NET Core. A deadlock condition can be triggered in Http2OutputProducer.Stop(), which may lead to a denial of service. It was discovered that .NET did not properly handle memory in it's Double Parse routine. An attacker could possibly use this issue to achieve remote code execution. It was discovered that .NET did not properly handle the usage of a shared resource. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30046 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-833: Deadlock •

CVSS: 7.5EPSS: 1%CPEs: 7EXPL: 0

CVE-2024-30045 – .NET and Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2024-30045

14 May 2024 — .NET and Visual Studio Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de .NET y Visual Studio A remote code execution vulnerability exists in .NET 7.0 and .NET 8.0. A stack buffer overrun occurs in the .NET Double Parse routine. It was discovered that .NET did not properly handle memory in it's Double Parse routine. An attacker could possibly use this issue to achieve remote code execution. It was discovered that .NET did not properly handle the usage of a shared resource. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30045 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-122: Heap-based Buffer Overflow •

CVSS: 10.0EPSS: 8%CPEs: 15EXPL: 0

CVE-2024-28938 – Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2024-28938

09 Apr 2024 — Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código del controlador ODBC de Microsoft para SQL Server • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28938 • CWE-125: Out-of-bounds Read •