Priority HIGH 72
.NET and Visual Studio Denial of Service Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0309 · Published 2024-03-12 · Fixed in 17.9.3, 7.3.12 +6 CWE-400
Priority HIGH 71
PowerShell Remote Code Execution Vulnerability
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.60779 · Published 2022-12-13 · Fixed in 7.2.8, 7.3.1 +14
Priority MEDIUM 62
A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code Execution Vulnerability." This affects PowerShell Editor, PowerShell Extension.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.23094 · Published 2018-07-11 · No fix listed
Priority MEDIUM 54
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02778 · Published 2024-01-09 · Fixed in 8.0.1, 7.0.15 +25 CWE-20
Priority MEDIUM 47
.NET and Visual Studio Denial of Service Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05703 · Published 2022-05-10 · Fixed in 3.1.25, 5.0.17 +9 CWE-400
Priority MEDIUM 44
Microsoft QUIC Denial of Service Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0299 · Published 2024-03-12 · Fixed in 17.9.3, 10.0.20348.2340 +11 CWE-400
Priority MEDIUM 44
.NET Denial of Service Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02838 · Published 2023-01-10 · Fixed in 6.0.13, 7.2.9 CWE-502
Priority MEDIUM 44
.NET Core and Visual Studio Information Disclosure Vulnerability
CVSS 3.1MEDIUM 5.7· Adjacent network · No auth · User interaction · EPSS 0.20342 · Published 2021-10-13 · Fixed in 7.1.5, 16.9.12 +3 CWE-200
Priority MEDIUM 42
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00939 · Published 2026-08-11 · Fixed in 7.4.19.0, 7.5.10.0 +1 CWE-23
Priority MEDIUM 42
Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01753 · Published 2026-04-14 · Fixed in 10.0.6, 8.0.26 +4 CWE-400
Priority MEDIUM 42
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.06462 · Published 2020-05-21 · Fixed in publication, 2.1.18 +1
Priority MEDIUM 41
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00691 · Published 2026-10-13 · Fixed in 7.4.21, 7.5.12 +1 CWE-807
Priority MEDIUM 41
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over…
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.03217 · Published 2020-09-15 · Fixed in 1.0.9, 3.1.23 +3 CWE-130
Priority LOW 39
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.02513 · Published 2024-04-09 · Fixed in 17.9.6, 17.4.18 +11 CWE-416
Priority LOW 39
<p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.06575 · Published 2020-09-11 · Fixed in publication, 7.0.8 +1
Priority LOW 38
.NET Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.01722 · Published 2025-01-14 · Partial fix · 9.0.1, 17.10.10 +4 CWE-122
Priority LOW 37
Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00536 · Published 2026-04-14 · Fixed in 7.4.14, 7.5.5 CWE-20
Priority LOW 37
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.01072 · Published 2025-06-13 · Partial fix · 8.0.17, 9.0.6 +6 CWE-426
Priority LOW 36
Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00359 · Published 2026-08-11 · Fixed in 7.4.19.0, 7.5.10.0 +1 CWE-94
Priority LOW 36
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00322 · Published 2026-08-14 · Fixed in 7.4.19.0, 7.5.10.0 +1 CWE-77
Priority LOW 36
Windows Graphics Component Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01119 · Published 2022-12-13 · Fixed in 10.0.17763.3770, 10.0.19043.2364 +12
Priority LOW 35
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00487 · Published 2025-10-14 · Fixed in 7.4.13, 7.5.4 +15 CWE-284
Priority LOW 35
PowerShell Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0065 · Published 2022-04-15 · Fixed in 10.0.17763.2803, 10.0.18363.2212 +13
Priority LOW 34
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00382 · Published 2026-08-11 · Fixed in 7.4.19.0, 7.5.10.0 +1 CWE-276
Priority LOW 34
Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00874 · Published 2026-08-11 · Fixed in 7.4.19.0, 7.5.10.0 +1 CWE-918
Load more