{"vulnerability": "cve-2023-28299", "sightings": [{"uuid": "89d5be1f-8540-4404-a099-9412782bce3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "exploited", "source": "https://t.me/itsec_news/2713", "content": "\u200b\u26a1\ufe0f \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u044e\u0442 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 Visual Studio.\n\n\ud83d\udcac \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Varonis \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u00ab\u043b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Microsoft Visual Studio, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438\u0437\u0434\u0430\u0442\u0435\u043b\u044f \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439.\n\nMicrosoft Visual Studio \u2014 \u044d\u0442\u043e \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u044f .NET \u0438 C++ \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043d\u0430 Windows. \u041e\u043d\u0430 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0442\u043e\u0440\u044b, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0430\u0432\u0442\u043e\u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u044b \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0434\u0440\u0443\u0433\u0438\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0434\u043b\u044f \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0438\u0437\u0434\u0430\u0442\u0435\u043b\u044f \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439\u00bb, \u2014 \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b \u0414\u043e\u043b\u0435\u0432 \u0422\u0430\u043b\u0435\u0440, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Varonis.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-28299 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 5.5) \u0438 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 Microsoft \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0435\u0436\u0435\u043c\u0435\u0441\u044f\u0447\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2023 \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a \u00ab\u0441\u043f\u0443\u0444\u0438\u043d\u0433\u00bb, \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Varonis \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c Visual Studio. \u0412\u0438\u0437\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438\u0437\u0434\u0430\u0442\u0435\u043b\u0435\u0439. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043b\u044e\u0431\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0432 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0435 \u00ab\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u00bb \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u0430 Visual Studio Extension (VSIX) \u0432 \u0432\u0438\u0434\u0435 ZIP-\u0444\u0430\u0439\u043b\u0430.\n\n\u041a\u0430\u043a \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u043f\u0440\u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0430 \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 \u0444\u0430\u0439\u043b \u00abextension.vsixmanifest\u00bb, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430 \u0432 \u0433\u0440\u0430\u0444\u0435 \u00ab\u0426\u0438\u0444\u0440\u043e\u0432\u0430\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u00bb, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0443\u0436\u0435 \u043d\u0435 \u0441\u043c\u043e\u0436\u0435\u0442 \u0443\u0432\u0438\u0434\u0435\u0442\u044c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043e\u0431 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0439 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u043e\u0432\u0435\u0440\u0438\u0442\u0441\u044f \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435.\n\n\u0412 \u0433\u0438\u043f\u043e\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0431\u044b \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c VSIX-\u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435\u043c, \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044f \u0435\u0433\u043e \u043f\u043e\u0434 \u0437\u0430\u043a\u043e\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0438, \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u043c\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0443.\n\n\u041d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0437\u0430\u0442\u0435\u043c \u043c\u043e\u0433 \u0431\u044b \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u043a\u0430\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u0435\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u0441\u0435\u0442\u044c\u044e \u0436\u0435\u0440\u0442\u0432\u044b \u0434\u043b\u044f \u043e\u0431\u043b\u0435\u0433\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u00ab\u041d\u0438\u0437\u043a\u0430\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0435\u043b\u0430\u044e\u0442 \u0435\u0451 \u043b\u0435\u0433\u043a\u043e\u0439 \u0434\u043b\u044f \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0432 \u043e\u0440\u0443\u0436\u0438\u0435 \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0441 \u0446\u0435\u043b\u044c\u044e \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u00bb, \u2014 \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u043b \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Varonis.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0430\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Visual Studio \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0440\u0435\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u0432\u0441\u0435\u0433\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0446\u0438\u0444\u0440\u043e\u0432\u0443\u044e \u043f\u043e\u0434\u043f\u0438\u0441\u044c \u0438\u0437\u0434\u0430\u0442\u0435\u043b\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0435\u0441\u043b\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043a\u0430\u0436\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c. \u0422\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0441\u0432\u043e\u0451 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0438 \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c\u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u044f\u043c\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-06-12T15:47:04.000000Z"}, {"uuid": "4a6808df-6a5a-415d-9601-e900e3b50cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1651", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-28299\n\ud83d\udd39 Description: Visual Studio Spoofing Vulnerability\n\ud83d\udccf Published: 2023-04-11T19:13:59.381Z\n\ud83d\udccf Modified: 2025-01-14T23:57:22.875Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28299", "creation_timestamp": "2025-01-15T00:12:10.000000Z"}, {"uuid": "37e7f5c5-e786-4231-be5b-017cef9d2f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/TYG_YE/833", "content": "\u0643\u0634\u0641 \u0627\u0644\u0628\u0627\u062d\u062b\u0648\u0646 \u0639\u0646 \u062b\u063a\u0631\u0629 \u062c\u062f\u064a\u062f\u0629 (CVE-2023-28299) \u0641\u064a \u0645\u062b\u0628\u062a Microsoft Visual Studio \u0642\u062f \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u0627\u0646\u062a\u062d\u0627\u0644 \u0635\u0641\u0629 \u0627\u0644\u0646\u0627\u0634\u0631\u064a\u0646 \u0627\u0644\u0645\u0648\u062b\u0648\u0642 \u0628\u0647\u0645 \u0648\u062a\u0648\u0632\u064a\u0639 \u0645\u0644\u062d\u0642\u0627\u062a \u0636\u0627\u0631\u0629.\n #Yemeni_Hackers", "creation_timestamp": "2023-06-13T10:51:41.000000Z"}, {"uuid": "8b157004-8c01-4e95-83d9-34edf971019a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/JerusalemElectronicArmy/379", "content": "#\u0623\u062e\u0628\u0627\u0631_\u0627\u0644\u0633\u0627\u064a\u0628\u0631 \n\n\u0643\u0634\u0641 \u0627\u0644\u0628\u0627\u062d\u062b\u0648\u0646 \u0639\u0646 \u062e\u0644\u0644 \u062c\u062f\u064a\u062f (CVE-2023-28299) \u0645\u062b\u0628\u062a \u0641\u064a Microsoft Visual Studio \u0642\u062f \u064a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u0627\u0646\u062a\u062d\u0627\u0644 \u0635\u0641\u0629 \u0627\u0644\u0646\u0627\u0634\u0631\u064a\u0646 \u0627\u0644\u0645\u0648\u062b\u0648\u0642 \u0628\u0647\u0645 \u0648\u062a\u0648\u0632\u064a\u0639 \u0645\u0644\u062d\u0642\u0627\u062a \u0636\u0627\u0631\u0629.\n#\u062c\u064a\u0634_\u0627\u0644\u0642\u062f\u0633_\u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a", "creation_timestamp": "2023-06-13T12:19:40.000000Z"}, {"uuid": "e24c6f08-0a45-41fb-98da-e8eba91512ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/cibsecurity/61951", "content": "\u203c CVE-2023-28299 \u203c\n\nVisual Studio Spoofing Vulnerability\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T00:29:55.000000Z"}, {"uuid": "9f62e8c3-fc97-4104-adea-cfb5149fc04e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/thehackernews/3469", "content": "Researchers have uncovered a new flaw (CVE-2023-28299) in the Microsoft Visual Studio installer that could allow attackers to impersonate trusted publishers and distribute malicious extensions.  \n \nRead details: https://thehackernews.com/2023/06/researchers-uncover-publisher-spoofing.html", "creation_timestamp": "2023-06-12T14:50:25.000000Z"}, {"uuid": "63cd9ddd-6025-4e31-9371-82f36ae718ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/Hackme_news/775", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-28299) \u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0435 #Microsoft Visual Studio, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0437\u0434\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f.", "creation_timestamp": "2026-09-01T17:00:08.304684Z"}, {"uuid": "fad5379d-7d5f-4d81-ba21-a1f84f050368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/cissp/6940", "content": "Researchers have uncovered a new flaw (CVE-2023-28299) in the Microsoft Visual Studio installer that could allow attackers to impersonate trusted publishers and distribute malicious extensions.  \nRead details:\n https://thehackernews.com/2023/06/researchers-uncover-publisher-spoofing.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.03.22", "creation_timestamp": "2026-09-01T17:00:19.962210Z"}, {"uuid": "11ad28f2-be80-4220-8686-9cba4888805d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/hacking_Attack/105700", "content": "Black Hat Ethical Hacking\nMicrosoft Visual Studio Flaw Enables Impersonation of Trusted Publishers\n\nMicrosoft Visual Studio Flaw Enables Impersonation of Trusted PublishersPost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nVaronis Threat Labs has discovered a significant user interface (UI) bug (CVE-2023-28299) in Microsoft Visual Studio\u2019s extension installer. This vulnerability allows attackers to manipulate extension signatures, effectively impersonating any publisher. Microsoft promptly addressed the issue by releasing a patch for CVE-2023-28299 on April 11, 2023.\n\nFailure to apply the patch leaves systems susceptible to targeted attacks, as threat actors can distribute malicious extensions to compromise vulnerable systems.\n\nWhy is this a matter of concern? Visual Studio, the second most popular Integrated Development Environment (IDE) in the market, boasts a substantial user base of over thirty thousand customers, commanding a significant 26% market share.\n\nVisual Studio\u2019s appeal lies in its extensive collection of extensions, which range from integrating GitHub and SQL servers to simple productivity tools like spell checks and code snippets. The most popular extensions often accumulate millions of downloads. However, the UI bug discovered by Varonis Threat Labs (CVE-2023-28299) exposes a critical risk: threat actors can impersonate well-known publishers and distribute malicious extensions to compromise targeted systems. These malicious extensions have been known to facilitate data theft, unauthorized code access and alteration, and even complete system takeover.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe nature of the bug revolves around Visual Studio\u2019s prevention of newline characters within an extension\u2019s name, specifically by blocking user input in the \u201cProduct Name\u201d extension property. However, this restriction can be easily bypassed by opening the VSIX file as a ZIP archive and manually adding newline characters to the \u201c<displayname\u201d tag in the \u201cextension.vsixmanifest\u201d file.\n\n \nhttps://info.varonis.com/hubfs/image-png-3.png Creating a new C# project and editing its property\nhttps://info.varonis.com/hubfs/image-png-Jun-02-2023-12-25-29-4200-AM.png Editing in 7zip\nBy adding a sufficient number of newline characters, the extension\u2019s name pushes down the remaining text in the Visual Studio installation prompt, effectively concealing the warning \u201cDigital Signature: None.\u201d Spoofing SignaturesThis exploit allows threat actors to create a spoofed extension that appears legitimate but lacks a digital signature, a critical indicator of authenticity. Furthermore, the threat actor gains control over the extension\u2019s signature area, enabling them to insert fake \u201cDigital Signature\u201d text that appears genuine to the user.\n\nhttps://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-32-5189-AM.png Real extension with digital signature\nhttps://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-23-9129-AM.png Extension without digital signature\nhttps://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-14-1777-AM.png Extension with spoofed signature\nTrending: Write up: Find hidden and encrypted secrets from any website Trending: Offensive Security Tool: Pypykatz\nThe attack scenario unfolds primarily through phishing techniques. Here\u2019s an example:\n\n1. The attacker disguises an email as a legitimate software update, targeting company developers.\n2. The email includes the spoofed VSIX extension, mimicking the appearance of a genuine update.\n3. Unable to differentiate the malicious VSIX from a legitimate signed update, the victim [...]", "creation_timestamp": "2026-09-01T20:00:57.222633Z"}, {"uuid": "c5862923-c697-4d9b-a975-9343a793a126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/hacking_Attack/105701", "content": "unknowingly installs the malicious extension.\n4. Once the crafted payload within the extension takes effect, the attacker gains a foothold in the victim\u2019s machine, establishing an initial access point within the organization.\n5. With this initial access, the threat actor can proceed to move laterally within the compromised organization, potentially stealing intellectual property (IP), confidential data, and causing further business impact.\n\nMicrosoft responded promptly to this exploit, assigning it the CVE-2023-28299 identifier and including a fix in the Patch Tuesday update released on April 11, 2023. Varonis Threat Labs delayed the publication of this article to ensure that a fix was made available.\n\nIt is strongly recommended that all systems susceptible to this vulnerability apply the patch provided by Microsoft and remain vigilant for any suspicious activity.\n\nIn summary, CVE-2023-28299 highlights a critical UI bug in Microsoft Visual Studio, a leading IDE, which enables the spoofing of publisher digital signatures. The ease of exploitation, coupled with the potential consequences, makes this vulnerability a significant concern. Threat actors can exploit this flaw to distribute malicious extensions, posing a serious risk to compromised systems. Microsoft has acknowledged this vulnerability and addressed it through the release of a patch as part of their April 11, 2023, Patch Tuesday update.\nTrending: Anonymous Sudan Launches DDoS Attacks on Microsoft Outlook\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: www.varonis.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-27-300x150.png Fortinet Releases Urgent Firmware Updates to Address Critical SSL VPN VulnerabilityJune 12, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-26-300x150.png Exposed Win32k Windows Vulnerability, Researchers Share Proof-of-Concept ExploitJune 9, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-25-300x150.png Honda\u2019s E-commerce Platform Exposed, Researcher Exploits API Flaws for Unrestricted Data AccessJune 8, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-24-300x150.png Anonymous Sudan Launches DDoS Attacks on Microsoft OutlookJune 7, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.\nThe post Microsoft Visual Studio Flaw Enables Impersonation of Trusted Publishers first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-01T20:00:57.266200Z"}, {"uuid": "d29adadd-030e-4617-bfdd-82ebe0ed5c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/hacking_Attack/105700", "content": "Black Hat Ethical Hacking\nMicrosoft Visual Studio Flaw Enables Impersonation of Trusted Publishers\n\nMicrosoft Visual Studio Flaw Enables Impersonation of Trusted PublishersPost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nVaronis Threat Labs has discovered a significant user interface (UI) bug (CVE-2023-28299) in Microsoft Visual Studio\u2019s extension installer. This vulnerability allows attackers to manipulate extension signatures, effectively impersonating any publisher. Microsoft promptly addressed the issue by releasing a patch for CVE-2023-28299 on April 11, 2023.\n\nFailure to apply the patch leaves systems susceptible to targeted attacks, as threat actors can distribute malicious extensions to compromise vulnerable systems.\n\nWhy is this a matter of concern? Visual Studio, the second most popular Integrated Development Environment (IDE) in the market, boasts a substantial user base of over thirty thousand customers, commanding a significant 26% market share.\n\nVisual Studio\u2019s appeal lies in its extensive collection of extensions, which range from integrating GitHub and SQL servers to simple productivity tools like spell checks and code snippets. The most popular extensions often accumulate millions of downloads. However, the UI bug discovered by Varonis Threat Labs (CVE-2023-28299) exposes a critical risk: threat actors can impersonate well-known publishers and distribute malicious extensions to compromise targeted systems. These malicious extensions have been known to facilitate data theft, unauthorized code access and alteration, and even complete system takeover.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe nature of the bug revolves around Visual Studio\u2019s prevention of newline characters within an extension\u2019s name, specifically by blocking user input in the \u201cProduct Name\u201d extension property. However, this restriction can be easily bypassed by opening the VSIX file as a ZIP archive and manually adding newline characters to the \u201c<displayname\u201d tag in the \u201cextension.vsixmanifest\u201d file.\n\n \nhttps://info.varonis.com/hubfs/image-png-3.png Creating a new C# project and editing its property\nhttps://info.varonis.com/hubfs/image-png-Jun-02-2023-12-25-29-4200-AM.png Editing in 7zip\nBy adding a sufficient number of newline characters, the extension\u2019s name pushes down the remaining text in the Visual Studio installation prompt, effectively concealing the warning \u201cDigital Signature: None.\u201d Spoofing SignaturesThis exploit allows threat actors to create a spoofed extension that appears legitimate but lacks a digital signature, a critical indicator of authenticity. Furthermore, the threat actor gains control over the extension\u2019s signature area, enabling them to insert fake \u201cDigital Signature\u201d text that appears genuine to the user.\n\nhttps://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-32-5189-AM.png Real extension with digital signature\nhttps://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-23-9129-AM.png Extension without digital signature\nhttps://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-14-1777-AM.png Extension with spoofed signature\nTrending: Write up: Find hidden and encrypted secrets from any website Trending: Offensive Security Tool: Pypykatz\nThe attack scenario unfolds primarily through phishing techniques. Here\u2019s an example:\n\n1. The attacker disguises an email as a legitimate software update, targeting company developers.\n2. The email includes the spoofed VSIX extension, mimicking the appearance of a genuine update.\n3. Unable to differentiate the malicious VSIX from a legitimate signed update, the victim [...]", "creation_timestamp": "2026-09-02T01:01:17.253343Z"}, {"uuid": "c887d124-d2b9-4bc5-bdff-154b6b2665aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/hacking_Attack/105701", "content": "unknowingly installs the malicious extension.\n4. Once the crafted payload within the extension takes effect, the attacker gains a foothold in the victim\u2019s machine, establishing an initial access point within the organization.\n5. With this initial access, the threat actor can proceed to move laterally within the compromised organization, potentially stealing intellectual property (IP), confidential data, and causing further business impact.\n\nMicrosoft responded promptly to this exploit, assigning it the CVE-2023-28299 identifier and including a fix in the Patch Tuesday update released on April 11, 2023. Varonis Threat Labs delayed the publication of this article to ensure that a fix was made available.\n\nIt is strongly recommended that all systems susceptible to this vulnerability apply the patch provided by Microsoft and remain vigilant for any suspicious activity.\n\nIn summary, CVE-2023-28299 highlights a critical UI bug in Microsoft Visual Studio, a leading IDE, which enables the spoofing of publisher digital signatures. The ease of exploitation, coupled with the potential consequences, makes this vulnerability a significant concern. Threat actors can exploit this flaw to distribute malicious extensions, posing a serious risk to compromised systems. Microsoft has acknowledged this vulnerability and addressed it through the release of a patch as part of their April 11, 2023, Patch Tuesday update.\nTrending: Anonymous Sudan Launches DDoS Attacks on Microsoft Outlook\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: www.varonis.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-27-300x150.png Fortinet Releases Urgent Firmware Updates to Address Critical SSL VPN VulnerabilityJune 12, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-26-300x150.png Exposed Win32k Windows Vulnerability, Researchers Share Proof-of-Concept ExploitJune 9, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-25-300x150.png Honda\u2019s E-commerce Platform Exposed, Researcher Exploits API Flaws for Unrestricted Data AccessJune 8, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-24-300x150.png Anonymous Sudan Launches DDoS Attacks on Microsoft OutlookJune 7, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.\nThe post Microsoft Visual Studio Flaw Enables Impersonation of Trusted Publishers first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-02T01:01:17.299075Z"}, {"uuid": "37e14fba-c0ac-4b86-8814-3618efb77373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/Hackme_news/775", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-28299) \u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0435 #Microsoft Visual Studio, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0437\u0434\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f.", "creation_timestamp": "2026-09-02T01:03:36.806216Z"}, {"uuid": "54001b6d-4623-48ad-b1b5-6cfd83b8542a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/cissp/6940", "content": "Researchers have uncovered a new flaw (CVE-2023-28299) in the Microsoft Visual Studio installer that could allow attackers to impersonate trusted publishers and distribute malicious extensions.  \nRead details:\n https://thehackernews.com/2023/06/researchers-uncover-publisher-spoofing.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.03.22", "creation_timestamp": "2026-09-02T01:03:59.476285Z"}, {"uuid": "4c6ce5d9-a9e0-4f5a-ba12-9a9c95197b88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/hacking_Attack/105701", "content": "unknowingly installs the malicious extension.\n4. Once the crafted payload within the extension takes effect, the attacker gains a foothold in the victim\u2019s machine, establishing an initial access point within the organization.\n5. With this initial access, the threat actor can proceed to move laterally within the compromised organization, potentially stealing intellectual property (IP), confidential data, and causing further business impact.\n\nMicrosoft responded promptly to this exploit, assigning it the CVE-2023-28299 identifier and including a fix in the Patch Tuesday update released on April 11, 2023. Varonis Threat Labs delayed the publication of this article to ensure that a fix was made available.\n\nIt is strongly recommended that all systems susceptible to this vulnerability apply the patch provided by Microsoft and remain vigilant for any suspicious activity.\n\nIn summary, CVE-2023-28299 highlights a critical UI bug in Microsoft Visual Studio, a leading IDE, which enables the spoofing of publisher digital signatures. The ease of exploitation, coupled with the potential consequences, makes this vulnerability a significant concern. Threat actors can exploit this flaw to distribute malicious extensions, posing a serious risk to compromised systems. Microsoft has acknowledged this vulnerability and addressed it through the release of a patch as part of their April 11, 2023, Patch Tuesday update.\nTrending: Anonymous Sudan Launches DDoS Attacks on Microsoft Outlook\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: www.varonis.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-27-300x150.png Fortinet Releases Urgent Firmware Updates to Address Critical SSL VPN VulnerabilityJune 12, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-26-300x150.png Exposed Win32k Windows Vulnerability, Researchers Share Proof-of-Concept ExploitJune 9, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-25-300x150.png Honda\u2019s E-commerce Platform Exposed, Researcher Exploits API Flaws for Unrestricted Data AccessJune 8, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-24-300x150.png Anonymous Sudan Launches DDoS Attacks on Microsoft OutlookJune 7, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.\nThe post Microsoft Visual Studio Flaw Enables Impersonation of Trusted Publishers first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-04T13:00:03.921811Z"}, {"uuid": "a6ebf524-8f87-4dc1-a4d8-26ee7d04d94d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/105700", "content": "Black Hat Ethical Hacking\nMicrosoft Visual Studio Flaw Enables Impersonation of Trusted Publishers\n\nMicrosoft Visual Studio Flaw Enables Impersonation of Trusted PublishersPost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nVaronis Threat Labs has discovered a significant user interface (UI) bug (CVE-2023-28299) in Microsoft Visual Studio\u2019s extension installer. This vulnerability allows attackers to manipulate extension signatures, effectively impersonating any publisher. Microsoft promptly addressed the issue by releasing a patch for CVE-2023-28299 on April 11, 2023.\n\nFailure to apply the patch leaves systems susceptible to targeted attacks, as threat actors can distribute malicious extensions to compromise vulnerable systems.\n\nWhy is this a matter of concern? Visual Studio, the second most popular Integrated Development Environment (IDE) in the market, boasts a substantial user base of over thirty thousand customers, commanding a significant 26% market share.\n\nVisual Studio\u2019s appeal lies in its extensive collection of extensions, which range from integrating GitHub and SQL servers to simple productivity tools like spell checks and code snippets. The most popular extensions often accumulate millions of downloads. However, the UI bug discovered by Varonis Threat Labs (CVE-2023-28299) exposes a critical risk: threat actors can impersonate well-known publishers and distribute malicious extensions to compromise targeted systems. These malicious extensions have been known to facilitate data theft, unauthorized code access and alteration, and even complete system takeover.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe nature of the bug revolves around Visual Studio\u2019s prevention of newline characters within an extension\u2019s name, specifically by blocking user input in the \u201cProduct Name\u201d extension property. However, this restriction can be easily bypassed by opening the VSIX file as a ZIP archive and manually adding newline characters to the \u201c<displayname\u201d tag in the \u201cextension.vsixmanifest\u201d file.\n\n \nhttps://info.varonis.com/hubfs/image-png-3.png Creating a new C# project and editing its property\nhttps://info.varonis.com/hubfs/image-png-Jun-02-2023-12-25-29-4200-AM.png Editing in 7zip\nBy adding a sufficient number of newline characters, the extension\u2019s name pushes down the remaining text in the Visual Studio installation prompt, effectively concealing the warning \u201cDigital Signature: None.\u201d Spoofing SignaturesThis exploit allows threat actors to create a spoofed extension that appears legitimate but lacks a digital signature, a critical indicator of authenticity. Furthermore, the threat actor gains control over the extension\u2019s signature area, enabling them to insert fake \u201cDigital Signature\u201d text that appears genuine to the user.\n\nhttps://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-32-5189-AM.png Real extension with digital signature\nhttps://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-23-9129-AM.png Extension without digital signature\nhttps://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-14-1777-AM.png Extension with spoofed signature\nTrending: Write up: Find hidden and encrypted secrets from any website Trending: Offensive Security Tool: Pypykatz\nThe attack scenario unfolds primarily through phishing techniques. Here\u2019s an example:\n\n1. The attacker disguises an email as a legitimate software update, targeting company developers.\n2. The email includes the spoofed VSIX extension, mimicking the appearance of a genuine update.\n3. Unable to differentiate the malicious VSIX from a legitimate signed update, the victim [...]", "creation_timestamp": "2026-09-04T13:00:03.965966Z"}, {"uuid": "c65e0a38-6507-4fde-a271-f0f88c235e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/hacking_Attack/105701", "content": "unknowingly installs the malicious extension.\n4. Once the crafted payload within the extension takes effect, the attacker gains a foothold in the victim\u2019s machine, establishing an initial access point within the organization.\n5. With this initial access, the threat actor can proceed to move laterally within the compromised organization, potentially stealing intellectual property (IP), confidential data, and causing further business impact.\n\nMicrosoft responded promptly to this exploit, assigning it the CVE-2023-28299 identifier and including a fix in the Patch Tuesday update released on April 11, 2023. Varonis Threat Labs delayed the publication of this article to ensure that a fix was made available.\n\nIt is strongly recommended that all systems susceptible to this vulnerability apply the patch provided by Microsoft and remain vigilant for any suspicious activity.\n\nIn summary, CVE-2023-28299 highlights a critical UI bug in Microsoft Visual Studio, a leading IDE, which enables the spoofing of publisher digital signatures. The ease of exploitation, coupled with the potential consequences, makes this vulnerability a significant concern. Threat actors can exploit this flaw to distribute malicious extensions, posing a serious risk to compromised systems. Microsoft has acknowledged this vulnerability and addressed it through the release of a patch as part of their April 11, 2023, Patch Tuesday update.\nTrending: Anonymous Sudan Launches DDoS Attacks on Microsoft Outlook\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: www.varonis.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-27-300x150.png Fortinet Releases Urgent Firmware Updates to Address Critical SSL VPN VulnerabilityJune 12, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-26-300x150.png Exposed Win32k Windows Vulnerability, Researchers Share Proof-of-Concept ExploitJune 9, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-25-300x150.png Honda\u2019s E-commerce Platform Exposed, Researcher Exploits API Flaws for Unrestricted Data AccessJune 8, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/06/Images-for-the-News-posts-24-300x150.png Anonymous Sudan Launches DDoS Attacks on Microsoft OutlookJune 7, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.\nThe post Microsoft Visual Studio Flaw Enables Impersonation of Trusted Publishers first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-05T01:00:27.810500Z"}, {"uuid": "21ca8bba-e3af-4a60-84b7-7e02d454ea15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/105700", "content": "Black Hat Ethical Hacking\nMicrosoft Visual Studio Flaw Enables Impersonation of Trusted Publishers\n\nMicrosoft Visual Studio Flaw Enables Impersonation of Trusted PublishersPost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nVaronis Threat Labs has discovered a significant user interface (UI) bug (CVE-2023-28299) in Microsoft Visual Studio\u2019s extension installer. This vulnerability allows attackers to manipulate extension signatures, effectively impersonating any publisher. Microsoft promptly addressed the issue by releasing a patch for CVE-2023-28299 on April 11, 2023.\n\nFailure to apply the patch leaves systems susceptible to targeted attacks, as threat actors can distribute malicious extensions to compromise vulnerable systems.\n\nWhy is this a matter of concern? Visual Studio, the second most popular Integrated Development Environment (IDE) in the market, boasts a substantial user base of over thirty thousand customers, commanding a significant 26% market share.\n\nVisual Studio\u2019s appeal lies in its extensive collection of extensions, which range from integrating GitHub and SQL servers to simple productivity tools like spell checks and code snippets. The most popular extensions often accumulate millions of downloads. However, the UI bug discovered by Varonis Threat Labs (CVE-2023-28299) exposes a critical risk: threat actors can impersonate well-known publishers and distribute malicious extensions to compromise targeted systems. These malicious extensions have been known to facilitate data theft, unauthorized code access and alteration, and even complete system takeover.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe nature of the bug revolves around Visual Studio\u2019s prevention of newline characters within an extension\u2019s name, specifically by blocking user input in the \u201cProduct Name\u201d extension property. However, this restriction can be easily bypassed by opening the VSIX file as a ZIP archive and manually adding newline characters to the \u201c<displayname\u201d tag in the \u201cextension.vsixmanifest\u201d file.\n\n \nhttps://info.varonis.com/hubfs/image-png-3.png Creating a new C# project and editing its property\nhttps://info.varonis.com/hubfs/image-png-Jun-02-2023-12-25-29-4200-AM.png Editing in 7zip\nBy adding a sufficient number of newline characters, the extension\u2019s name pushes down the remaining text in the Visual Studio installation prompt, effectively concealing the warning \u201cDigital Signature: None.\u201d Spoofing SignaturesThis exploit allows threat actors to create a spoofed extension that appears legitimate but lacks a digital signature, a critical indicator of authenticity. Furthermore, the threat actor gains control over the extension\u2019s signature area, enabling them to insert fake \u201cDigital Signature\u201d text that appears genuine to the user.\n\nhttps://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-32-5189-AM.png Real extension with digital signature\nhttps://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-23-9129-AM.png Extension without digital signature\nhttps://info.varonis.com/hubfs/image-png-Jun-02-2023-12-33-14-1777-AM.png Extension with spoofed signature\nTrending: Write up: Find hidden and encrypted secrets from any website Trending: Offensive Security Tool: Pypykatz\nThe attack scenario unfolds primarily through phishing techniques. Here\u2019s an example:\n\n1. The attacker disguises an email as a legitimate software update, targeting company developers.\n2. The email includes the spoofed VSIX extension, mimicking the appearance of a genuine update.\n3. Unable to differentiate the malicious VSIX from a legitimate signed update, the victim [...]", "creation_timestamp": "2026-09-05T01:00:27.851049Z"}, {"uuid": "a60f32e7-ddda-4340-89c1-5da4639372a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/Hackme_news/775", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-28299) \u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0435 #Microsoft Visual Studio, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0437\u0434\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f.", "creation_timestamp": "2026-09-09T00:00:10.197725Z"}, {"uuid": "156867d9-d155-4b02-a126-0193898e00f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/cissp/6940", "content": "Researchers have uncovered a new flaw (CVE-2023-28299) in the Microsoft Visual Studio installer that could allow attackers to impersonate trusted publishers and distribute malicious extensions.  \nRead details:\n https://thehackernews.com/2023/06/researchers-uncover-publisher-spoofing.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.03.22", "creation_timestamp": "2026-09-09T23:00:05.287058Z"}, {"uuid": "88b86a39-bc13-4dda-bbc4-a8bb92ce04b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-28299", "type": "seen", "source": "https://t.me/cissp/6940", "content": "Researchers have uncovered a new flaw (CVE-2023-28299) in the Microsoft Visual Studio installer that could allow attackers to impersonate trusted publishers and distribute malicious extensions.  \nRead details:\n https://thehackernews.com/2023/06/researchers-uncover-publisher-spoofing.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.03.22", "creation_timestamp": "2026-09-10T00:00:09.603485Z"}]}