Microsoft Visual Studio Code code injection vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code, which stems from a remote code execution vulnerability in Visual Studio Code Maven Extension for Java. The following products and...

Microsoft Visual Studio Permission Licensing and Access Control Vulnerabilities

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. Visual Studio Installer Elevation of Privilege Vulnerability, no detailed vulnerability details are...

CVE-2021-28470: Undefined Security Weakness

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability...

PT-2021-2669 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to incorrect code generation management in the editor. It may allow an attacker to execute arbitrary code. Recommendations: At the moment, there is no...

Vulnerabilities fixed in Microsoft Developer Tools

Vulnerabilities have been fixed in Windows Developer Tools. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Remote code execution User privileges. Impersonating another user Access to sensitive data Increased use...

CVE-2021-28469: Undefined Security Weakness

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-27064: Undefined Security Weakness

Visual Studio Installer Elevation of Privilege Vulnerability...

PT-2021-2731 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code Remote Development Extension Pack affected versions not specified Description: The issue is related to incorrect code generation management in the Remote Development Extension Pack for Microsoft Visual Studio Code...

Security Update for Microsoft Visual Studio Code GitHub Pull Requests and Isssues Extension (April 2021)

The Microsoft Visual Studio Code GitHub Pull Requests and Issues Extension is prior to version 0.25.1. It is, therefore, affected by a remote code execution vulnerability. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary...

CVE-2021-28473: Undefined Security Weakness

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-28477: Undefined Security Weakness

Visual Studio Code Remote Code Execution Vulnerability...

Microsoft Visual Studio Code Python Extension Data Compromise

The vulnerability of the Microsoft Visual Studio Code Python Extension is related to improper code generation management. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2021-29261

The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration...

CVE-2021-29261

The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration...

CVE-2021-28832

VSCodeVim before 1.19.0 allows attackers to execute arbitrary code via a crafted workspace configuration...

Default configuration

The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration...

CVE-2021-29261

The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration...

CVE-2021-29261

The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration...

CVE-2021-29261

The CVE-2021-29261 entry concerns the unofficial Svelte extension for Visual Studio Code, with versions before 104.8.0 vulnerable to arbitrary code execution via a crafted workspace configuration. The affected component is the Svelte language-tools extension used in VS Code; the root cause is not...

CVE-2021-29261: Undefined Security Weakness

The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration...