Lucene search

K
redosRedosROS-20231115-04
HistoryNov 15, 2023 - 12:00 a.m.

ROS-20231115-04

2023-11-1500:00:00
redos.red-soft.ru
11
visual studio code
source code editor
vulnerability
improper control
insufficient protection
input data validation
arbitrary code execution
attacker
exploitation
information presentation errors
user interface
spoofing attacks
microsoft visual studio
software development tool

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

71.1%

Visual Studio Coden source code editor vulnerability related to improper control of code generation.
code generation. Exploitation of the vulnerability may allow an attacker to execute arbitrary code

Visual Studio Code source code editor vulnerability is related to insufficient protection of service data.
Exploitation of the vulnerability may allow an attacker to execute arbitrary code

Visual Studio Code source code editor vulnerability is related to insufficient input data validation.
Exploitation of the vulnerability may allow an attacker to execute arbitrary code by using a specially
specially crafted file

Electron application writing framework vulnerability is related to improper control of code generation.
code generation. Exploitation of the vulnerability could allow an attacker to execute arbitrary code

Visual Studio Code source code editor vulnerability is related to insufficient verification of input data.
data. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code.
arbitrary code

Vulnerability of Visual Studio Code source code editor related to information presentation errors in the user interface.
user interface. Exploitation of the vulnerability could allow an attacker to conduct spoofing attacks.

Microsoft Visual Studio software development tool vulnerability is related to insufficient input data validation.
input data validation. Exploitation of the vulnerability could allow an attacker to execute arbitrary code

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64codium<= 1.84.2.23314-1UNKNOWN

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

71.1%