CVE-2022-35827 – Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2022-35827

09 Aug 2022 — Visual Studio Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Visual Studio. Este ID de CVE es diferente de CVE-2022-35777, CVE-2022-35825, CVE-2022-35826 • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35827 •

CVE-2022-35826 – Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2022-35826

09 Aug 2022 — Visual Studio Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Visual Studio. Este ID de CVE es diferente de CVE-2022-35777, CVE-2022-35825, CVE-2022-35827 • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35826 •

CVE-2022-35825 – Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2022-35825

09 Aug 2022 — Visual Studio Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Visual Studio. Este ID de CVE es diferente de CVE-2022-35777, CVE-2022-35826, CVE-2022-35827 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of FBX fil... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35825 •

CVE-2022-35777 – Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2022-35777

09 Aug 2022 — Visual Studio Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Visual Studio. Este ID de CVE es diferente de CVE-2022-35825, CVE-2022-35826, CVE-2022-35827 • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35777 •

CVE-2021-3146

https://notcve.org/view.php?id=CVE-2021-3146

08 Apr 2021 — The Dolby Audio X2 (DAX2) API service before 0.8.8.90 on Windows allows local users to gain privileges. El servicio de API Dolby Audio X2 (DAX2) versiones anteriores a 0.8.8.90 en Windows permite a los usuarios locales obtener privilegios • https://professional.dolby.com/siteassets/pdfs/dolby-dax2-security-advisory-2021-04-07.pdf • CWE-426: Untrusted Search Path •

CVE-2020-16856 – Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2020-16856

10 Sep 2020 —

A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have f... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16856 •

CVE-2020-16874 – Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2020-16874

10 Sep 2020 —

A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have f... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16874 •

CVE-2020-1147 – Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2020-1147

14 Jul 2020 — A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'. Se presenta una vulnerabilidad de ejecución de código remota en .NET Framework, Microsoft SharePoint y Visual Studio cuando el software presenta un fallo al comprobar el marcado de origen de una entrada de archivo XML, también se conoce como ... • https://packetstorm.news/files/id/163644 • CWE-502: Deserialization of Untrusted Data •

CVE-2019-1079

https://notcve.org/view.php?id=CVE-2019-1079

15 Jul 2019 — An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information Disclosure Vulnerability'. Existe una vulnerabilidad de divulgación de información cuando Visual Studio analiza inapropiadamente la entrada XML en ciertos archivos de configuración, también se conoce como "Visual Studio Information Disclosure Vulnerability". • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1079 • CWE-20: Improper Input Validation •

CVE-2018-8172 – Microsoft Security Bulletin CVE Revision Increment for August, 2018

https://notcve.org/view.php?id=CVE-2018-8172

11 Jul 2018 — A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4. Existe una vulnerabilidad de ejecución remota de código en el software de Visual Studio cuando el software no comprueba el marcado de fuentes de un archivo para un proyecto sin implementar. Esto también se conoce como "Visual Studio Remote C... • https://github.com/SyFi/CVE-2018-8172 •