This post has been republished via RSS; it originally appeared at: MSRC Security Update Guide.
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.