5199 matches found
Visual Studio Code Live Share Information Disclosure Vulnerability
An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plain text. To exploit the vulnerability, an attacker would need to perform a successful capture of the tokens from client to proxy, where specific proxy settings are being used,...
KLA11812 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Diagnostic Hub...
KB4561649: Windows 10 June 2020 Security Update
The remote Windows host is missing security update 4561649. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execu...
The vulnerability of the Python extension in the Microsoft Visual Studio software development environment allows a hacker to execute arbitrary code.
The vulnerability of the Python extension in the Microsoft Visual Studio software development environment is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
CVE-2020-1192
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1171...
CVE-2020-1192
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
CVE-2020-1171
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on wi...
CVE-2020-1171
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1192...
Remote code execution
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1171...
Remote code execution
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1192...
CVE-2020-1192
CVE-2020-1192 describes a remote code execution vulnerability in Visual Studio Code involving the Python extension loading workspace settings from a notebook file. The CVE is distinct from CVE-2020-1171. Public technical specifics (exact affected versions, root cause details, and patch/mitigation...
CVE-2020-1192 Visual Studio Code Python Extension Remote Code Execution Vulnerability
...
CVE-2020-1171
The CVE-2020-1171 entry describes a remote code execution vulnerability in Visual Studio Code when the Python extension loads configuration files after opening a project. The root cause is tied to the Python extension’s handling of configuration files, enabling code execution in the context of th...
CVE-2020-1171 Visual Studio Code Python Extension Remote Code Execution Vulnerability
...
The vulnerability of the Extension Installer Service, a component of the Microsoft Visual Studio software development tool, allows a malicious individual to escalate their privileges.
The vulnerability of the Extension Installer Service in the Microsoft Visual Studio software development environment is related to improper handling of file operations. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
The vulnerability of the Microsoft Visual Studio software update service allows a hacker to escalate their privileges.
The vulnerability of the Microsoft Visual Studio software update service is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...
Windows-Pwn-Step-by-Step
This is a Windows executable file ExploitMe1.exe that appears to be a proof-of-concept PoC exploit for a vulnerability in the Windows operating system. The file is a Visual Studio project that has been compiled and packaged into an executable. The executable is designed to exploit a vulnerability...
Microsoft Visual Studio Code Extensions Installed
Binary data microsoftvisualstudiocodewinextensionsinstalled.nbin...
Security Update for Microsoft Visual Studio Code Python Extension (May 2020)
A remote code execution RCE vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged o...
