CVE-2020-17148: Undefined Security Weakness

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability...

CVE-2020-17150: Undefined Security Weakness

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2020-17159: Undefined Security Weakness

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability...

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

...

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

...

Visual Studio Remote Code Execution Vulnerability

...

PT-2020-5217 · Microsoft · Tslint +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to incorrect code generation management in the TSLint static code analyzer of Visual Studio Code. Exploitation of this issue may allow an attacker to execute...

Microsoft Visual Studio Code Code Injection Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected:Visual Studio Code Remote - SSH Extension...

PT-2020-5221 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Visual Studio. Exploitation of this issue may allow an attacker to execute arbitrary code...

PT-2020-5225 · Microsoft · Visual Studio Code Remote Development Extension

Name of the Vulnerable Software and Affected Versions: Visual Studio Code Remote Development Extension affected versions not specified Description: The issue is related to the Visual Studio Code Remote Development Extension and involves a problem with the SSH editor's source code, specifically wi...

KLA12020 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Azure DevOps Server can be...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed multiple vulnerabilities in several developer tools. A malicious party could potentially exploit them to execute arbitrary code with user privileges. Vulnerabilities related to Visual Studio can only be be exploited by convincing the user to open rogue files. Visual Studio:...

PT-2020-5215 · Microsoft · Visual Studio Code Java Extension Pack +1

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 for Finance and Operations on-premises affected versions not specified Microsoft Visual Studio Code Java Extension affected versions not specified Description: The issue concerns a remote code execution vulnerability an...

Security Updates for Microsoft Visual Studio Products (December 2020)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by the following vulnerability: - An unspecified remote code execution vulnerability exists in Visual Studio. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary...

Microsoft Visual Studio code injection vulnerability

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle.Git for Visual Studio is one of the Git Distributed Version Control Git for Visual Studio i...

Microsoft Visual Studio Code Code Injection Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected:Visual Studio Code TS-Lint Extension...

Microsoft Visual Studio Code code injection vulnerability

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. A remote code execution vulnerability exists in Microsoft Visual Studio. An attacker could exploit t...

PT-2020-5228 · Microsoft · Visual Studio Code Java Extension Pack

Name of the Vulnerable Software and Affected Versions: Visual Studio Code Java Extension Pack affected versions not specified Description: The issue is related to incorrect code generation management in the Language Support component of the Microsoft Visual Studio Code Java Extension Pack...

Visual Studio Code Source Editor Code Execution

The vulnerability of Visual Studio Code’s source editor exists due to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Visual Studio Code Source Editor Code Execution

The vulnerability of Visual Studio Code’s source editor exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file from a remote location...