CVE-2021-31938

Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability...

CVE-2021-31938

The CVE-2021-31938 entry concerns Elevation of Privilege in the Microsoft Visual Studio Code Kubernetes Tools Extension. Affected component: the VS Code Kubernetes Tools Extension; issue arises from how the extension handles inputs (per Nessus plugin: prior to version 1.3.3, exploited by opening ...

Vulnerabilities fixed in Microsoft .NET Core and Visual Studio

Microsoft has fixed vulnerabilities in .NET Core, Visual Studio and Visual Studio Code. An unauthenticated malicious person at remote user could potentially exploit it to cause a denial-of-service. The vulnerability with attribute CVE-2021-31938 could potentially be exploited by a local malicious...

KLA12200 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in ASP.NET can be exploited remotely to cause denial o...

Security Update for Microsoft Visual Studio Code Kubernetes Tools Extension (June 2021)

The Microsoft Visual Studio Code Kubernetes Tools Extension is prior to version 1.3.3. It is, therefore, affected by an elevation of privilege vulnerability. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the...