Radek Zikmund

**Name of the Vulnerable Software and Affected Versions** Microsoft Visual Studio/.NET versions prior to 10.0.8 **Description** A tampering issue occurs when .NET Core improperly handles specially crafted files. An attacker can exploit this by sending a specially crafted file to a vulnerable system, allowing them to write arbitrary files and directories to specific locations. The attacker has limited control over the destination of these files and directories. This is related to an absolute path traversal, which is a technique used to access files and directories that are stored outside the intended folder. **Recommendations** Update to version 10.0.8 or later.

Name of the Vulnerable Software and Affected Versions: .NET and Visual Studio (affected versions not specified) Description: The issue is related to a use-after-free memory vulnerability in the .NET and Visual Studio software platform. This vulnerability can be exploited by a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** .NET and Visual Studio (affected versions not specified) **Description** The issue concerns a remote code execution vulnerability. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited are provided. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.