Search Results (368 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-62897 1 Microsoft 7 .net, .net Framework, Visual Studio 2022 and 4 more 2026-08-14 7 High
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.
CVE-2026-62900 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-08-14 5.9 Medium
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-62871 3 Apple, Linux, Microsoft 8 Macos, Linux Kernel, .net and 5 more 2026-08-14 7.8 High
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
CVE-2026-62898 1 Microsoft 5 .net, Microsoft Visual Studio 2022, Microsoft Visual Studio 2026 and 2 more 2026-08-14 7.5 High
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
CVE-2026-70336 1 Microsoft 1 Visual Studio Code 2026-08-12 8.8 High
Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVE-2026-58650 1 Microsoft 1 Visual Studio Code 2026-08-12 7.8 High
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-47285 1 Microsoft 1 Visual Studio Code 2026-08-12 6.5 Medium
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
CVE-2026-69320 1 Microsoft 1 Visual Studio Code 2026-08-12 8.8 High
Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVE-2026-69278 1 Microsoft 1 Visual Studio Code 2026-08-12 7.8 High
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-59113 1 Microsoft 1 Visual Studio Code 2026-08-12 8.8 High
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVE-2026-69306 1 Microsoft 1 Visual Studio Code 2026-08-11 8.2 High
Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2023-44487 33 Akka, Amazon, Apache and 30 more 378 Http Server, Opensearch Data Prepper, Apisix and 375 more 2026-08-11 7.5 High
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2026-70335 1 Microsoft 1 Visual Studio Code 2026-08-11 7.8 High
Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.
CVE-2024-21404 2 Microsoft, Redhat 7 .net, Asp.net Core, Visual Studio and 4 more 2026-08-10 7.5 High
.NET Denial of Service Vulnerability
CVE-2024-21386 2 Microsoft, Redhat 5 Asp.net Core, Visual Studio, Visual Studio 2022 and 2 more 2026-08-10 7.5 High
.NET Denial of Service Vulnerability
CVE-2021-34529 1 Microsoft 1 Visual Studio Code 2026-08-10 7.8 High
Visual Studio Code Remote Code Execution Vulnerability
CVE-2023-38180 3 Fedoraproject, Microsoft, Redhat 7 Fedora, .net, Asp.net Core and 4 more 2026-08-10 7.5 High
.NET and Visual Studio Denial of Service Vulnerability
CVE-2023-35391 1 Microsoft 3 .net, Asp.net Core, Visual Studio 2022 2026-08-10 6.2 Medium
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
CVE-2023-35390 2 Microsoft, Redhat 5 .net, Visual Studio 2022, Enterprise Linux and 2 more 2026-08-10 7.8 High
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-36897 1 Microsoft 9 365 Apps, Office, Office 2019 and 6 more 2026-08-10 8.1 High
Visual Studio Tools for Office Runtime Spoofing Vulnerability