PT-2021-2726 · Microsoft · Visual Studio Code Kubernetes Tools Extension

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio Code Kubernetes Tools Extension affected versions not specified Description: The issue is related to incorrect code generation management in the Microsoft Visual Studio Code Kubernetes Tools Extension. Exploitation of...

PT-2021-2714 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio Code affected versions not specified Description: The issue is related to errors in code generation management in the Microsoft Visual Studio Code editor. Exploitation of this issue may allow an attacker to execute...

Microsoft Visual Studio Code code injection vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A code execution vulnerability exists in Microsoft Visual Studio, which can be exploited by an attacker to execute arbitrary code on a system with the privileges of the victim...

CVE-2021-30503: Undefined Security Weakness

The unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code execution via a crafted glslangValidatorPath in the workspace configuration...

CVE-2021-28471: Undefined Security Weakness

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability...

Microsoft Diagnostics Hub Standard Collector Service permission and access control issue vulnerabilities

Microsoft Diagnostics Hub Standard Collector Service is a Win32 service from Microsoft USA. It is used to collect real-time ETW events and process them. The Microsoft Diagnostics Hub Standard Collector Service is vulnerable to privilege permission and access control issues. The following products...

PT-2021-2709 · Microsoft · Visual Studio Installer

Name of the Vulnerable Software and Affected Versions: Visual Studio Installer affected versions not specified Description: The issue is related to insecure privilege management in the Microsoft Visual Studio development software installation service. Exploitation of this issue may allow an...

PT-2021-2741 · Microsoft · Vscode-Maven

Name of the Vulnerable Software and Affected Versions: Maven for Java Extension vscode-maven versions affected versions not specified Description: The issue is related to incorrect code generation management in the Maven for Java Extension for Microsoft Visual Studio Code. Exploitation of this...

PT-2021-2715 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to errors in code generation management in the Microsoft Visual Studio Code editor. Exploitation of this issue may allow an attacker to execute arbitrary cod...

Microsoft Visual Studio Code code injection vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. Visual Studio Code code injection vulnerability. No details of the vulnerability are provided at this time...

KLA12146 RCE vulnerability in Microsoft Developer tools

A remote code execution vulnerability was found in Microsoft Developer tools. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-28448 Exploitation Related products Microsoft-Visual-Studio CVE list CVE-2021-28448 critical KB list Solution Instal...

CVE-2021-28475: Undefined Security Weakness

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-28473: Undefined Security Weakness

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-28457: Undefined Security Weakness

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-28448: Undefined Security Weakness

Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability...

PT-2021-18766

Name of the Vulnerable Software and Affected Versions Unofficial GLSL Linting extension versions prior to 1.4.0 for Visual Studio Code Description The issue allows remote code execution via a crafted glslangValidatorPath in the workspace configuration. Recommendations For versions prior to 1.4.0,...

CVE-2021-28477: Undefined Security Weakness

Visual Studio Code Remote Code Execution Vulnerability...

Microsoft Visual Studio Code code injection vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code, which stems from a GitHub pull request and a remote code execution vulnerability in the extension in question...

Microsoft Visual Studio Code code injection vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A code execution vulnerability exists in Microsoft Visual Studio, which can be exploited by an attacker to execute arbitrary code on a system with the privileges of the victim...

Microsoft Visual Studio Code code injection vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Microsoft Visual Studio Code, which can be exploited by an attacker to remotely execute code...