Microsoft: >> Visual Studio 2017 Security Vulnerabilities
Visual Studio Installer Elevation of Privilege Vulnerability
CVSS Score
7.8
EPSS Score
0.004
Published
2021-04-13
Visual Studio Code Remote Code Execution Vulnerability
CVSS Score
7.0
EPSS Score
0.008
Published
2021-02-25
.NET Core and Visual Studio Denial of Service Vulnerability
CVSS Score
6.5
EPSS Score
0.048
Published
2021-02-25
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVSS Score
7.8
EPSS Score
0.003
Published
2021-01-12
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVSS Score
7.8
EPSS Score
0.005
Published
2021-01-12
Visual Studio Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.063
Published
2020-12-10
Visual Studio Tampering Vulnerability
CVSS Score
5.5
EPSS Score
0.005
Published
2020-11-11
Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.
CVSS Score
6.1
EPSS Score
0.002
Published
2020-10-07
<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p>
<p>An attacker could exploit this vulnerability by running a specially crafted application on the victim system.</p>
<p>The update addresses the vulnerability by correcting the way the Diagnostics Hub Standard Collector handles data operations.</p>
CVSS Score
6.6
EPSS Score
0.007
Published
2020-09-11
<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p>
<p>An attacker could exploit this vulnerability by running a specially crafted application on the victim system.</p>
<p>The update addresses the vulnerability by correcting the way the Diagnostics Hub Standard Collector handles file operations.</p>
CVSS Score
5.5
EPSS Score
0.008
Published
2020-09-11