CVE-2021-28794: Undefined Security Weakness

The unofficial ShellCheck extension before 0.13.4 for Visual Studio Code mishandles shellcheck.executablePath...

CVE-2021-28789: Undefined Security Weakness

The unofficial apple/swift-format extension before 1.1.2 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted apple-swift-format.path configuration value that triggers execution upon opening the workspace...

CVE-2021-28792: Undefined Security Weakness

The unofficial Swift Development Environment extension before 2.12.1 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted sourcekit-lsp.serverPath, swift.languageServerPath, swift.path.sourcekite,...

Valentin Knabel vscode-swiftformat security vulnerabilities

vscode-swiftformat is an open source application. Automatically organize Swift code through SwiftFormat. A security vulnerability exists in vscode-swiftformat versions prior to 2.12.1, which can be exploited by attackers to execute arbitrary code...

vscode-swiftlint security vulnerabilities

vscode-swiftlint is open source an unofficial VS Code extension . Swift styles and conventions can be implemented through SwiftLint . A code execution vulnerability exists in versions prior to vscode-swiftlint 1.4.5, which can be exploited by an attacker to execute arbitrary code on a system...

CVE-2021-28790: Undefined Security Weakness

The unofficial SwiftLint extension before 1.4.5 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftlint.path configuration value that triggers execution upon opening the workspace...

PT-2021-17917

Name of the Vulnerable Software and Affected Versions: SwiftFormat extension for Visual Studio Code versions prior to 1.3.7 Description: The issue allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftformat.path configuration value that...

Valentin Knabel vscode-swiftformat security vulnerabilities

vscode-swiftformat is open source an unofficial VS Code extension . A security vulnerability exists in versions of vscode-swiftformat prior to 1.3.7, which can be exploited by attackers to execute arbitrary code on a system...

PT-2021-5210

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description The issue is related to incorrect code generation management in the settings.json file of Microsoft Visual Studio Code, allowing an attacker to execute arbitrary code...

Microsoft Visual Studio Code Java Extension Code Execution

The vulnerability of the Microsoft Visual Studio Code Java Extension relates to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Microsoft Visual Studio Code Remote Development Extension Code Execution

The vulnerability of the Microsoft Visual Studio Code Remote Development Extension is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Visual Studio Code Python Extension Remote Code Execution Vulnerability

...

KLA12130 ACE vulnerability in Microsoft Developer Tools

A remote code execution vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2020-17163 Exploitation Related products Microsoft-Visual-Studio CVE list CVE-2020-17163 critical KB list Solution Instal...

PT-2021-2504 · Microsoft · Visual Studio Code Python Extension

Name of the Vulnerable Software and Affected Versions: Visual Studio Code Python Extension affected versions not specified Description: The issue is related to incorrect code generation management in the Microsoft Visual Studio Code Python Extension. Exploitation of this issue may allow a remote...

DLLHSC - DLL Hijack SCanner A Tool To Assist With The Discovery Of Suitable Candidates For DLL Hijacking

DLL Hijack SCanner - A tool to generate leads and automate the discovery of candidates for DLL Search Order Hijacking Contents of this repository This repository hosts the Visual Studio project file for the tool DLLHSC, the project file for the API hooking functionality detour, the project file f...

PT-2021-2740 · Microsoft · Visual Studio Code Github Pull Requests/Issues Extension

Name of the Vulnerable Software and Affected Versions: Visual Studio Code GitHub Pull Requests and Issues Extension affected versions not specified Description: The issue is related to incorrect code generation management in the extension, which can be exploited by sending a specially crafted...

Security Update for Microsoft Visual Studio Code Quantum Development Kit Extension (March 2021)

Microsoft Quantum Development Kit for Visual Studio Code could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the...

Security Update for Microsoft Visual Studio Code (March 2021)

An arbitrary code execution vulnerability exists in Microsoft Visual Studio Code. An unauthenticated, local attacker can exploit this by persuading a victim to open specially-crafted content which could exploit this vulnerability to execute arbitrary code on the system with privileges of the...

Security Update for Microsoft Visual Studio Code Java Extension Pack Extension (March 2021)

Microsoft Visual Studio Code Java Extension Pack could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the victim. Not...

Security Update for Microsoft Visual Studio Code ESLint Extension (March 2021)

Microsoft Visual Studio Code Remote Development Extension could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the...