| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. |
| Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network. |
| Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network. |
| Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. |
| Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
| Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
| Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
| Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network. |
| Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network. |
| A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application.
The update addresses the vulnerability by correcting how the .NET web application handles web requests. |
| Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. |
| Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network. |
| Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. |
| Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally. |
| Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. |
| Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network. |
| Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network. |
| Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. |
| Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. |
| Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network. |
