CVE-2021-34528 Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2021-34528

The CVE-2021-34528 entry relates to a Remote Code Execution vulnerability in Microsoft Visual Studio Code. Based on the connected sources, the vulnerability affects Visual Studio Code and allows arbitrary code execution; CVSS details indicate a HIGHImpact with local attack vector and required use...

CVE-2021-34528

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-34477 Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability

...

CVE-2021-34477

CVE-2021-34477 affects Visual Studio Code .NET Runtime, described as a local elevation-of-privilege vulnerability with high impact. The CVSS records indicate a local, low-complexity attack vector with no authentication and no user interaction, yielding high confidentiality, integrity, and availab...

CVE-2021-34477: Improper Privilege Management

Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability...

CVE-2021-34529: Undefined Security Weakness

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-34528: Undefined Security Weakness

Visual Studio Code Remote Code Execution Vulnerability...

Visual Studio Code Remote Code Execution Vulnerability

...

Visual Studio Code Remote Code Execution Vulnerability

...

PT-2021-4318

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description The issue is related to insecure privilege management in Visual Studio Code. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations At the...

Security Update for Microsoft Visual Studio Code .NET Education Bundle SDK Install Tool Extension (July 2021)

The Microsoft Visual Studio Code .NET Education Bundle SDK Install Tool Extension is prior to version 0.7.0. It is, therefore, affected by an elevation of privilege vulnerability due to inaccurately scoped permissions being set on downloaded .NET install scripts. Note that Nessus has not tested f...

KLA12245 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio Code can be...

Microsoft Visual Studio Code 权限许可和访问控制问题漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A vulnerability exists in Microsoft Visual Studio Code due to privilege licensing and access control issues. The following products and versions are affected: .NET Education Bundle SDK Install Tool, .NET...

Microsoft Visual Studio Code 代码注入漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected: Visual Studio Code...

Microsoft Visual Studio Code 代码注入漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected:Visual Studio Code...

Microsoft Visual Studio Code 安全漏洞

Microsoft Visual Studio is a family of development tools from Microsoft Corporation USA and is a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. An attacker could exploit this vulnerability with a specially crafted website to spoof...

PT-2021-5211

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio Code affected versions not specified Description The issue is related to incorrect code generation management in the editor. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations At...

Security Update for Microsoft Visual Studio Code (July 2021)

The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.58.1. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. CVE-2021-34528 - A spoofing vulnerability. CVE-2021-34479 Note that Nessus has not tested for this iss...

Security Update for Microsoft Visual Studio Code .NET Install Tool for Extension Authors Extension (July 2021)

The Microsoft Visual Studio Code .NET Install Tool for Extension Authors Extension is prior to version 1.2.0. It is, therefore, affected by an elevation of privilege vulnerability due to inaccurately scoped permissions being set on downloaded .NET install scripts. Note that Nessus has not tested...