CVE-2021-34477

Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability...

CVE-2021-34477

Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability...

CVE-2021-34477

CVE-2021-34477 affects Visual Studio Code .NET Runtime, described as a local elevation-of-privilege vulnerability with high impact. The CVSS records indicate a local, low-complexity attack vector with no authentication and no user interaction, yielding high confidentiality, integrity, and availab...

CVE-2021-34477 Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability

...

KLA12245 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio Code can be...

Security Update for Microsoft Visual Studio Code .NET Install Tool for Extension Authors Extension (July 2021)

The Microsoft Visual Studio Code .NET Install Tool for Extension Authors Extension is prior to version 1.2.0. It is, therefore, affected by an elevation of privilege vulnerability due to inaccurately scoped permissions being set on downloaded .NET install scripts. Note that Nessus has not tested...

Security Update for Microsoft Visual Studio Code .NET Education Bundle SDK Install Tool Extension (July 2021)

The Microsoft Visual Studio Code .NET Education Bundle SDK Install Tool Extension is prior to version 0.7.0. It is, therefore, affected by an elevation of privilege vulnerability due to inaccurately scoped permissions being set on downloaded .NET install scripts. Note that Nessus has not tested f...