CVE-2021-28477

CVE-2021-28477 is a remote code execution vulnerability affecting Visual Studio Code and related tooling. The connected sources describe it within a batch of Microsoft developer-tools CVEs and note that the April 2021 security update for Visual Studio Code addresses this issue; the Tenable NASL e...

CVE-2021-28473 Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2021-28473

CVE-2021-28473 is a Visual Studio Code remote code execution vulnerability with a base CVSS:3.1 score of 7.8 (HIGH). The available documentation indicates the affected product is Visual Studio Code (and related Visual Studio Code extensions in the ecosystem), with the vulnerability categorized as...

CVE-2021-28472

Summary: CVE-2021-28472 refers to a remote code execution vulnerability in the Visual Studio Code Maven for Java Extension. The OSV/NVD entries corroborate that the extension can be exploited to execute arbitrary code on affected systems. The vulnerability is tied to the Maven for Java extension ...

CVE-2021-28472 Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

...

CVE-2021-28471 Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2021-28472 Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

...

CVE-2021-28471

CVE-2021-28471 is a Remote Development Extension for Visual Studio Code remote code execution vulnerability. The NVD/OSV entries rate it HIGH (CVSS v3.1: LOCAL, LOW/LOCAL, UI REQUIRED, C/H/I/H/A/H). The vulnerability affects Visual Studio Code components and related tools (e.g., Remote Developmen...

EUVD-2021-15150

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability...

CVE-2021-28470 Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability

...

CVE-2021-28470

CVE-2021-28470 affects the Visual Studio Code GitHub Pull Requests and Issues Extension. The vulnerability is a remote code execution flaw in the extension component, with exploitation requiring user interaction and local access, as indicated by CVSS 3.1 (LOCAL, UI: REQUIRED, C/H/I/A HIGH). Affec...

CVE-2021-28469 Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2021-28469

CVE-2021-28469 is a Visual Studio Code remote code execution vulnerability. Connected sources identify Visual Studio Code and related extensions as affected; the Nessus plugin notes that vulnerable versions include those prior to 1.55.2. The NVD/MSRC entry lists a high CVSS 3.1 (7.8) impact with ...

CVE-2021-28457 Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2021-28457 Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2021-28457

CVE-2021-28457 is a Visual Studio Code remote code execution vulnerability. The connected records identify affected software as Visual Studio Code and, specifically, the GitHub Pull Requests and Issues Extension, among other VS Code-related components, with a root cause leading to arbitrary code ...

CVE-2021-28448

CVE-2021-28448 affects the Visual Studio Code Kubernetes Tools extension. The vulnerability enables remote code execution when a user opens crafted content, as reported by multiple sources (e.g., Kaspersky advisories, NVD/MSRC data). The primary affected component is the Kubernetes Tools extensio...

CVE-2021-28448 Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability

...

CVE-2021-27064 Visual Studio Installer Elevation of Privilege Vulnerability

...

CVE-2021-27064

CVE-2021-27064 is a local elevation-of-privilege vulnerability in the Microsoft Visual Studio Installer component. The CVSS details (CVSS:3.1) indicate a LOCAL, LOW-PRIVILEGE exploitation with no user interaction, leading to HIGH confidentiality, integrity, and availability impact if exploited, t...