CVE-2021-28794

The unofficial ShellCheck extension before 0.13.4 for Visual Studio Code mishandles shellcheck.executablePath...

CVE-2021-28792

The CVE-2021-28792 entry concerns the unofficial Swift Development Environment extension for Visual Studio Code, affected prior to version 2.12.1. A malicious workspace can trigger arbitrary code execution by supplying crafted values in several extension configuration fields (e.g., sourcekit-lsp....

CVE-2021-28790

The unofficial SwiftLint extension before 1.4.5 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftlint.path configuration value that triggers execution upon opening the workspace...

CVE-2021-28790

CVE-2021-28790 affects the unofficial SwiftLint extension for Visual Studio Code prior to 1.4.5. A crafted swiftlint.path workspace configuration can trigger arbitrary code execution when the workspace is opened, enabling remote code execution under a local attack vector. The vulnerability arises...

Valentin Knabel vscode-swiftformat 安全漏洞

vscode-swiftformat is an open source application. Automatically organize Swift code through SwiftFormat. A security vulnerability exists in vscode-swiftformat versions prior to 2.12.1, which can be exploited by attackers to execute arbitrary code...

Valentin Knabel vscode-swiftformat 安全漏洞

vscode-swiftformat is open source an unofficial VS Code extension . A security vulnerability exists in versions of vscode-swiftformat prior to 1.3.7, which can be exploited by attackers to execute arbitrary code on a system...

vscode-swiftlint 安全漏洞

vscode-swiftlint is open source an unofficial VS Code extension . Swift styles and conventions can be implemented through SwiftLint . A code execution vulnerability exists in versions prior to vscode-swiftlint 1.4.5, which can be exploited by an attacker to execute arbitrary code on a system...

The vulnerability of the Microsoft Visual Studio Code Java Extension relates to improper code generation management, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio Code Java Extension relates to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

PT-2021-5210 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to incorrect code generation management in the settings.json file of Microsoft Visual Studio Code, allowing an attacker to execute arbitrary code...

The vulnerability of the Microsoft Visual Studio Code Remote Development Extension allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio Code Remote Development Extension is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Visual Studio Code Python Extension Remote Code Execution Vulnerability

...

KLA12130 ACE vulnerability in Microsoft Developer Tools

A remote code execution vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2020-17163 Related products Microsoft-Visual-Studio CVE list CVE-2020-17163 critical KB list Solution Install necessary...

PT-2021-2504 · Microsoft · Visual Studio Code Python Extension

Name of the Vulnerable Software and Affected Versions: Visual Studio Code Python Extension affected versions not specified Description: The issue is related to incorrect code generation management in the Microsoft Visual Studio Code Python Extension. Exploitation of this issue may allow a remote...

DLLHSC - DLL Hijack SCanner A Tool To Assist With The Discovery Of Suitable Candidates For DLL Hijacking

DLL Hijack SCanner - A tool to generate leads and automate the discovery of candidates for DLL Search Order Hijacking Contents of this repository This repository hosts the Visual Studio project file for the tool DLLHSC, the project file for the API hooking functionality detour, the project file f...

PT-2021-2740 · Microsoft · Visual Studio Code Github Pull Requests/Issues Extension

Name of the Vulnerable Software and Affected Versions: Visual Studio Code GitHub Pull Requests and Issues Extension affected versions not specified Description: The issue is related to incorrect code generation management in the extension, which can be exploited by sending a specially crafted...

Security Update for Microsoft Visual Studio Code ESLint Extension (March 2021)

Microsoft Visual Studio Code ESLint Extension could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the victim. Note...

Security Updates for Microsoft Visual Studio Products (March 2021)

The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-21300 C Tenable Netwo...

Security Update for Microsoft Visual Studio Code Java Extension Pack Extension (March 2021)

Microsoft Visual Studio Code Java Extension Pack could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the victim. Not...

Security Update for Microsoft Visual Studio Code Quantum Development Kit Extension (March 2021)

Microsoft Quantum Development Kit for Visual Studio Code could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the...

Security Update for Microsoft Visual Studio Code (March 2021)

An arbitrary code execution vulnerability exists in Microsoft Visual Studio Code. An unauthenticated, local attacker can exploit this by persuading a victim to open specially-crafted content which could exploit this vulnerability to execute arbitrary code on the system with privileges of the...