CVE-2022-35827 – Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2022-35827

09 Aug 2022 — Visual Studio Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Visual Studio. Este ID de CVE es diferente de CVE-2022-35777, CVE-2022-35825, CVE-2022-35826 • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35827 •

CVE-2022-35826 – Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2022-35826

09 Aug 2022 — Visual Studio Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Visual Studio. Este ID de CVE es diferente de CVE-2022-35777, CVE-2022-35825, CVE-2022-35827 • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35826 •

CVE-2022-35825 – Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2022-35825

09 Aug 2022 — Visual Studio Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Visual Studio. Este ID de CVE es diferente de CVE-2022-35777, CVE-2022-35826, CVE-2022-35827 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of FBX fil... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35825 •

CVE-2022-35777 – Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2022-35777

09 Aug 2022 — Visual Studio Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Visual Studio. Este ID de CVE es diferente de CVE-2022-35825, CVE-2022-35826, CVE-2022-35827 • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35777 •

CVE-2020-16856 – Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2020-16856

10 Sep 2020 —

A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have f... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16856 •

CVE-2020-16874 – Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2020-16874

10 Sep 2020 —

A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have f... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16874 •

CVE-2019-1079

https://notcve.org/view.php?id=CVE-2019-1079

15 Jul 2019 — An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information Disclosure Vulnerability'. Existe una vulnerabilidad de divulgación de información cuando Visual Studio analiza inapropiadamente la entrada XML en ciertos archivos de configuración, también se conoce como "Visual Studio Information Disclosure Vulnerability". • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1079 • CWE-20: Improper Input Validation •

CVE-2019-0537 – Microsoft Visual Studio vscontent XML External Entity Processing Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2019-0537

08 Jan 2019 — An information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary file contents if the victim opens a malicious .vscontent file, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio. Existe una vulnerabilidad de divulgación de información cuando Visual Studio divulga los contenidos de archivos arbitrarios si la víctima abre un archivo malicioso ".vscontent". Esto también se conoce como "Microsoft Visual Studio Information Dis... • http://www.securityfocus.com/bid/106390 •

CVE-2018-8172 – Microsoft Security Bulletin CVE Revision Increment for August, 2018

https://notcve.org/view.php?id=CVE-2018-8172

11 Jul 2018 — A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4. Existe una vulnerabilidad de ejecución remota de código en el software de Visual Studio cuando el software no comprueba el marcado de fuentes de un archivo para un proyecto sin implementar. Esto también se conoce como "Visual Studio Remote C... • https://github.com/SyFi/CVE-2018-8172 •

CVE-2018-1037 – Microsoft Security Bulletin CVE Revision Increment for April, 2018

https://notcve.org/view.php?id=CVE-2018-1037

12 Apr 2018 — An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio. Existe una vulnerabilidad de divulgación de información cuando Visual Studio muestra incorrectamente contenidos limitados de memoria no inicializada cuando se compilan archivos PDB (Program Database). Esto también se conoce como "Mi... • http://www.securityfocus.com/bid/103715 • CWE-908: Use of Uninitialized Resource •