CVE-2021-1639

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-1639

Visual Studio Code Remote Code Execution Vulnerability...

Denial of service

.NET Core and Visual Studio Denial of Service Vulnerability...

CVE-2021-26700

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...

Remote code execution

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-1721

.NET Core and Visual Studio Denial of Service Vulnerability...

Remote code execution

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...

CVE-2021-26700 Visual Studio Code npm-script Extension Remote Code Execution Vulnerability

...

CVE-2021-26700

The CVE affects the Visual Studio Code npm-script Extension (eg2.vscode-npm-script). A malicious project can cause the extension to execute commands when a user views package.json, via a crafted repository and settings.json, enabling remote code execution in the user’s context. Public exploitatio...

CVE-2021-1721 .NET Core and Visual Studio Denial of Service Vulnerability

...

CVE-2021-1721 .NET Core and Visual Studio Denial of Service Vulnerability

...

CVE-2021-1721

CVE-2021-1721 is a denial-of-service vulnerability in dotnet-core/.NET Core prior to 3.1.12 affecting HTTPS web requests during X509 certificate chain building. Multiple sources (Arch Linux advisories ASA-202103-17 and ASA-202103-16) describe the impact as a denial of service, with upgrade paths ...

CVE-2021-1639

CVE-2021-1639 appears as a Visual Studio Code remote code execution vulnerability. Connected sources confirm Visual Studio Code is affected and note public exploits exist (Kaspersky). The documents provide high-severity impact for this CVE but do not consistently expose concrete root-cause detail...

CVE-2021-1639 Visual Studio Code Remote Code Execution Vulnerability

...

Vulnerability of .NET Core software, PowerShell Core automation tools, and Microsoft Visual Studio software, related to insufficient input data validation, allowing attackers to trigger service failures.

The vulnerability of the .NET Core runtime, the PowerShell Core automation tool, and the Microsoft Visual Studio software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

PT-2021-17098 · Microsoft · Visual Studio Code Npm-Script Extension

Name of the Vulnerable Software and Affected Versions: Visual Studio Code npm-script Extension affected versions not specified Description: The issue concerns a remote code execution vulnerability in the Visual Studio Code npm-script Extension. There is no information provided about the estimated...

Security Update for Microsoft Visual Studio Code (Feb 2021)

An arbitrary code execution vulnerability exists in Microsoft Visual Studio Code. An unauthenticated, local attacker can exploit this by persuading a victim to open specially-crafted content which could exploit this vulnerability to execute arbitrary code on the system with privileges of the...

Security Update for Microsoft Visual Studio Code npm-script Extension (Feb 2021)

A remote code execution vulnerability exists in Visual Studio Code when the npm-script extension loads. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. Note that Nessus has not tested for this issue but has instead relied only ...

Security Updates for Microsoft Visual Studio Products (February 2021)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-1639 - A denial of servic...

Actively Exploited Windows Kernel Bug Allows Takeover

Microsoft has addressed nine critical-severity cybersecurity bugs in February’s Patch Tuesday updates, plus an important-rated vulnerability that is being actively exploited in the wild. Six of the security holes – including one of the critical bugs – were already publicly disclosed. Overall, the...