Semaine du 10 août au 16 août 2026

Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

Microsoft Visual Studio Code

Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Microsoft Visual Studio Code

Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

Microsoft Visual Studio Code

Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Microsoft Visual Studio Code

Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Microsoft Visual Studio Code

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Microsoft .NET 10.0 · Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft .NET Framework 3.5

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.

Microsoft .NET 8.0 · Microsoft .NET 9.0 · Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.8

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

Microsoft Visual Studio Code

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Microsoft Visual Studio Code

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Microsoft Python extension for Visual Studio Code · Microsoft python

Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.