Vendredi 11 septembre 2026

Microsoft Visual Studio Code

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Microsoft Visual Studio Code

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Microsoft Visual Studio Code

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Microsoft Visual Studio Code

Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Microsoft Visual Studio Code

Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Microsoft Visual Studio Code

Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Microsoft Visual Studio Code

Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Microsoft .NET 10.0 · Microsoft .NET 11.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Microsoft Visual Studio 2026 version 18.9 · Microsoft visual studio 2026

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.