CVE-2020-16881 Visual Studio JSON Remote Code Execution Vulnerability

...

CVE-2020-16881

The CVE-2020-16881 entry describes a remote code execution vulnerability in Visual Studio Code triggered when a user opens a malicious package.json. The underlying issue allows code execution in the context of the current user, potentially taking full control if the user has admin rights. Exploit...

Security Update for Microsoft Visual Studio Code (CVE-2020-16881)

The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.48.2. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file...