Microsoft Visual Studio Information Disclosure Vulnerability

<p>An information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary file contents if the victim opens a malicious .vscontent file. An attacker who took advantage of this information disclosure could view arbitrary file contents from the computer where the victim launched Visual Studio.</p> <p>To take advantage of the vulnerability, an attacker would need to trick a user into opening a malicious .vscontent file using a vulnerable version of Visual Studio. An attacker would have no way to force a developer to produce this information disclosure.</p> <p>The security update addresses the vulnerability by correcting how Visual Studio loads .vscontent files.</p>

Where it's fixed