Microsoft Visual Studio Code 安全漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A security vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected: Visual Studio Code Remote - Containers Extension...

PT-2021-2403 · Microsoft · Visual Studio Code Eslint Extension

Name of the Vulnerable Software and Affected Versions: Visual Studio Code ESLint Extension affected versions not specified Description: The issue is related to a lack of protection for internal data in the Microsoft Visual Studio Code ESLint Extension. Exploitation of this issue may allow an...

PT-2021-2416 · Microsoft · Quantum Development Kit

Name of the Vulnerable Software and Affected Versions: Microsoft Quantum Development Kit for Visual Studio Code affected versions not specified Description: The issue is related to a lack of protection for service data in the Microsoft Quantum Development Kit for Visual Studio Code. This can allo...

KLA12110 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio Code ESLint Extension can be exploited remotely to...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed multiple vulnerabilities in Visual Studio and Visual Studio Code. The vulnerabilities allow a malicious person able to execute arbitrary code under the privileges of the user. The vulnerability with reference CVE-2021-21300 has been classified by Microsoft rated "Critical" the...

PT-2021-2296 · Microsoft · Visual Studio Code Remote Development Extension

Name of the Vulnerable Software and Affected Versions: Visual Studio Code Remote Development Extension affected versions not specified Description: The issue is related to incorrect code generation management in the Remote Development Extension for Visual Studio Code. Exploitation of this issue m...

Microsoft Visual Studio Code 安全漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A security vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected: Visual Studio Code - Java Extension Pack...

PT-2021-2297 · Microsoft · Visual Studio Code Java Extension Pack

Name of the Vulnerable Software and Affected Versions: Visual Studio Code Java Extension Pack affected versions not specified Description: The issue is related to incorrect code generation management in the Visual Studio Code Java Extension Pack. Exploitation of this issue may allow a remote...

Microsoft Visual Studio Code 安全漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A security vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected: Visual Studio Code...

Microsoft Visual Studio Code 安全漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected: Microsoft Quantum Development Kit for Visual Studio Code...

CVE-2021-26700

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...

CVE-2021-26700

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...

CVE-2021-1639

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-1639

Visual Studio Code Remote Code Execution Vulnerability...

Remote code execution

Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-26700

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...

Remote code execution

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...

CVE-2021-26700 Visual Studio Code npm-script Extension Remote Code Execution Vulnerability

...

CVE-2021-26700

The CVE affects the Visual Studio Code npm-script Extension (eg2.vscode-npm-script). A malicious project can cause the extension to execute commands when a user views package.json, via a crafted repository and settings.json, enabling remote code execution in the user’s context. Public exploitatio...

CVE-2021-1639

CVE-2021-1639 appears as a Visual Studio Code remote code execution vulnerability. Connected sources confirm Visual Studio Code is affected and note public exploits exist (Kaspersky). The documents provide high-severity impact for this CVE but do not consistently expose concrete root-cause detail...