CVE-2021-28457

CVE-2021-28457 is a Visual Studio Code remote code execution vulnerability. The connected records identify affected software as Visual Studio Code and, specifically, the GitHub Pull Requests and Issues Extension, among other VS Code-related components, with a root cause leading to arbitrary code ...

CVE-2021-28448

Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability...

CVE-2021-28448 Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability

...

CVE-2021-28448

CVE-2021-28448 affects the Visual Studio Code Kubernetes Tools extension. The vulnerability enables remote code execution when a user opens crafted content, as reported by multiple sources (e.g., Kaspersky advisories, NVD/MSRC data). The primary affected component is the Kubernetes Tools extensio...

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

...

Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability

...

Visual Studio Code Remote Code Execution Vulnerability

...

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

...

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability

...

CVE-2021-30503

The unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code execution via a crafted glslangValidatorPath in the workspace configuration...

CVE-2021-30503

The unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code execution via a crafted glslangValidatorPath in the workspace configuration...

Remote code execution

The unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code execution via a crafted glslangValidatorPath in the workspace configuration...

CVE-2021-30503

The unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code execution via a crafted glslangValidatorPath in the workspace configuration...

CVE-2021-30503

The CVE-2021-30503 entry concerns the unofficial VSCode extension vscode-glsllint prior to version 1.4.0. The vulnerability enables remote code execution via a crafted glslangValidatorPath in the workspace configuration. Affected component is the extension’s use of external shader validators (gls...

CVE-2021-28470: Undefined Security Weakness

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability...

KLA12146 RCE vulnerability in Microsoft Developer tools

A remote code execution vulnerability was found in Microsoft Developer tools. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-28448 Exploitation Related products Microsoft-Visual-Studio CVE list CVE-2021-28448 critical KB list Solution Instal...

Security Update for Microsoft Visual Studio Code Kubernetes Tools Extension (April 2021)

The Microsoft Visual Studio Code Kubernetes Tools Extension is prior to version 1.3.0. It is, therefore, affected by a remote code execution vulnerability. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the syste...

PT-2021-2725 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio Code affected versions not specified Description: The issue is related to incorrect code generation management in the editor. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations:...

PT-2021-2733 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient protection of internal data in the Visual Studio Code editor, which can be exploited to execute arbitrary code. Recommendations: At the momen...

PT-2021-2726 · Microsoft · Visual Studio Code Kubernetes Tools Extension

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio Code Kubernetes Tools Extension affected versions not specified Description: The issue is related to incorrect code generation management in the Microsoft Visual Studio Code Kubernetes Tools Extension. Exploitation of...