Visual Studio Archives

Microsoft Visual Studio, .NET vulnerability (CVE-2023-38180) under attack in the wild

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / August 18, 2023 / .NET, CVE-2023-38180, Visual Studio

Microsoft provided an update to previously released August security updates that confirmed a Microsoft Visual Studio, .NET vulnerability (CVE-2023-38180) is under attack in the wild.

Microsoft March 2021 Security Updates, fixes for 14 Critical bugs

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / March 10, 2021 / Azure, CVE-2021-26411, CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-26897, CVE-2021-27065, DNS, DNS Server, Exchange, Git, HEVC, Hyper-V, Office, OpenType, Visual Studio, Windows

Microsoft has released the March 2021 Security updates that includes patches for 89 vulnerabilities, 14 of those rated Critical. The fixes follow just after the tech giant released emergency patched for Exchange flaws being exploited in the wild.

Microsoft February 2021 Security Updates, warns of Win32k Privilege Escalation vulnerability exploited in wild (updated)

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / February 12, 2021 / .NET, Azure, CVE-2021-1732, Developer Tools, DNS Server, Edge, Exchange Server Office, IOT, Kubernetes, Microsoft Dynamics, PFX Encryption, PKU2U, PowerSHell, Skype for Business, SysInternals, System Center, TCP/IP, Visual Studio

Microsoft has released the February 2021 Security updates that includes patches for 56 vulnerabilities, 11 of those rated Critical. Moreover, the tech giant warned of a Win32k Privilege Escalation vulnerability CVE-2021-1732 exploited in wild.

Microsoft January 2021 Security Updates (to include zero-day RCE patch)

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / January 13, 2021 / .NET, ASP.NET, Azure, CVE-2021-1643, CVE-2021-1647, CVE-2021-1658, CVE-2021-1660, CVE-2021-1665, CVE-2021-1666, CVE-2021-1667, CVE-2021-1668, CVE-2021-1673, CVE-2021-1705, Edge, Malware Protection Engine, Microsoft Edge, Microsoft Office, Microsoft Windows, SQL Server, Visual Studio, Windows

Microsoft has released the January 2021 Security updates that includes patches for 83 vulnerabilities, 10 of those rated Critical and 1 zero-day RCE vulnerability CVE-2021-1647 in Microsoft Defender.

Microsoft December 2020 Security Updates

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / December 9, 2020 / Azure, ChakraCore, CVE-2020-17095, CVE-2020-17117, CVE-2020-17118, CVE-2020-17131, CVE-2020-17132, CVE-2020-17152, Dynamics, Edge, Exchange, Office, Visual Studio, Windows

Microsoft has released the December 2020 Security updates that includes patches for 58 vulnerabilities, 9 of them rated Critical.

Microsoft November 2020 Security Updates, zero-day patch for CVE-2020-17087

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / November 11, 2020 / Azure DevOps, Azure SDK, Azure Sphere, ChakraCore, Codecs Library, CVE-2020-17042, CVE-2020-17048, CVE-2020-17051, CVE-2020-17052, CVE-2020-17053, CVE-2020-17058, CVE-2020-17078, CVE-2020-17079, CVE-2020-17082, CVE-2020-17087, CVE-2020-17101, CVE-2020-17105, CVE-2020-17106, CVE-2020-17107, CVE-2020-17108, CVE-2020-17109, CVE-2020-17110, Exchange Server, Internet Explorer, Microsoft Dynamics, Microsoft Edge, Microsoft Office, Microsoft Teams, Microsoft Windows, Visual Studio, Windows Defender

Microsoft has released the November 2020 Security updates that includes patches for 112 vulnerabilities, 17 of them rated Critical. In addition, the tech giant fixed a zero-day Windows kernel vulnerability CVE-2020-17087 with known public exploits.

Microsoft October 2020 Security Updates and “Bad Neighbor” RCE fix (updated)

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / October 16, 2020 / .NET, Adobe, codecs, CVE-2020-16898, CVE-2020-16951, CVE-2020-16952, CVE-2020-17022, CVE-2020-17023, Dynamics, Exchange Server, Flash Player, JET Database, Microsoft, Open Source, PowerSHell, Visual Studio, Windows

Microsoft has released the October 2020 Security updates that includes patches for 87 vulnerabilities, 11 of them rated Critical. The update also includes a patch for a Critical “Bad Neighbor” vulnerability and two out-of-band patches.

Microsoft September 2020 Security and Adobe Updates

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / September 9, 2020 / ASP.NET, Azure DevOps, ChakraCore, CVE-2020-0878, CVE-2020-0908, CVE-2020-0922, CVE-2020-0997, CVE-2020-1057, CVE-2020-1129, CVE-2020-1172, CVE-2020-1182, CVE-2020-1200, CVE-2020-1210, CVE-2020-1252, CVE-2020-1285, CVE-2020-1319, CVE-2020-1452, CVE-2020-1453, CVE-2020-1460, CVE-2020-1508, CVE-2020-1576, CVE-2020-1593, CVE-2020-1595, CVE-2020-16857, CVE-2020-16862, CVE-2020-16874, CVE-2020-16875, Edge, Exchange Server, Internet Explorer, Microsoft Dynamics, Microsoft JET Database Engine, Microsoft Office, OneDrive, SQL Server, Visual Studio, Windows

Microsoft has released the September 2020 Security updates that includes patches for 129 vulnerabilities, 24 of them rated Critical. Adobe also released updates for Experience Manager, Framemaker and InDesign.

Microsoft July 2020 Security Updates and patch for ‘Wormable’ RCE Vulnerability in Window DNS Server

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / July 14, 2020 / Azure, CVE-2020-1350, DNS, Edge, OneDrive, Skype, Visual Studio, Windows, Windows Defender

Microsoft has released July 2020 Security updates, that includes an emergency patch for ‘a Wormable’ RCE Vulnerability CVE-2020-1350 dubbed “SIGRed” in Window DNS Server.

Microsoft June 2020 Security Updates (and a Critical Adobe Flash patch)

Uncategorized / By Frank Crast / June 10, 2020 / ChakraCore, CVE-2020-1073, CVE-2020-1181, CVE-2020-1213, CVE-2020-1216, CVE-2020-1219, CVE-2020-1248, CVE-2020-1260, CVE-2020-1281, CVE-2020-1286, CVE-2020-1299, CVE-2020-1300, Edge, Flash, HoloLens, Office, Visual Studio, Windows

Microsoft released the June 2020 Security Updates that includes 128 unique vulnerability fixes, 11 of those rated critical. In addition, Adobe patched a Critical vulnerability in Adobe Flash.