Remote code execution

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-34528

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-34529

Visual Studio Code Remote Code Execution Vulnerability...

Privilege escalation

Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability...

CVE-2021-34529

Technical details about CVE-2021-34529 (affected product, root cause, impact, or fixes) are not publicly provided in the connected documents; monitor official advisories and updates for authoritative information.

CVE-2021-34529 Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2021-34528 Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2021-34528

The CVE-2021-34528 entry relates to a Remote Code Execution vulnerability in Microsoft Visual Studio Code. Based on the connected sources, the vulnerability affects Visual Studio Code and allows arbitrary code execution; CVSS details indicate a HIGHImpact with local attack vector and required use...

CVE-2021-34477

CVE-2021-34477 affects Visual Studio Code .NET Runtime, described as a local elevation-of-privilege vulnerability with high impact. The CVSS records indicate a local, low-complexity attack vector with no authentication and no user interaction, yielding high confidentiality, integrity, and availab...

CVE-2021-34477 Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability

...

Visual Studio Code Remote Code Execution Vulnerability

...

Visual Studio Code Remote Code Execution Vulnerability

...

Microsoft Visual Studio Code 代码注入漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected:Visual Studio Code...

Microsoft Visual Studio Code 代码注入漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected: Visual Studio Code...

PT-2021-4318 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insecure privilege management in Visual Studio Code. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations: At the...

Security Update for Microsoft Visual Studio Code .NET Install Tool for Extension Authors Extension (July 2021)

The Microsoft Visual Studio Code .NET Install Tool for Extension Authors Extension is prior to version 1.2.0. It is, therefore, affected by an elevation of privilege vulnerability due to inaccurately scoped permissions being set on downloaded .NET install scripts. Note that Nessus has not tested...

Security Update for Microsoft Visual Studio Code (July 2021)

The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.58.1. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. CVE-2021-34528 - A spoofing vulnerability. CVE-2021-34479 Note that Nessus has not tested for this iss...

Microsoft Visual Studio Code 权限许可和访问控制问题漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A vulnerability exists in Microsoft Visual Studio Code due to privilege licensing and access control issues. The following products and versions are affected: .NET Education Bundle SDK Install Tool, .NET...

Microsoft Visual Studio Code 安全漏洞

Microsoft Visual Studio is a family of development tools from Microsoft Corporation USA and is a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. An attacker could exploit this vulnerability with a specially crafted website to spoof...

PT-2021-5211 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio Code affected versions not specified Description: The issue is related to incorrect code generation management in the editor. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations:...