2086 matches found
CVE-2023-21779: Deserialization of Untrusted Data
Visual Studio Code Remote Code Execution Vulnerability...
Security Update for Microsoft Visual Studio Code (January 2023)
The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.74.3 It is, therefore, affected by a remote execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these...
Hackers Can Abuse Visual Studio Marketplace to Target Developers with Malicious Extensions
A new attack vector targeting the Visual Studio Code extensions marketplace could be leveraged to upload rogue extensions masquerading as their legitimate counterparts with the goal of mounting supply chain attacks. The technique "could act as an entry point for an attack on many organizations,"...
Visual Studio Code Privilege Escalation
The vulnerability of Visual Studio Code’s source editor is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges...
PT-2022-27376 · Microsoft +1 · Vscode +1
Name of the Vulnerable Software and Affected Versions: Markdown Preview Enhanced versions 0.6.5 through 0.19.6 for VSCode and Atom Description: A command injection issue was discovered via the PDF file import function. Recommendations: For versions 0.6.5 through 0.19.6, consider disabling the PDF...
Visual Studio Code Source Editor Code Execution
The vulnerability of Visual Studio Code’s source editor is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PT-2022-16699 · Microsoft +2 · Visual Studio +3
Name of the Vulnerable Software and Affected Versions: snyk versions prior to 1.1064.0 VS Code versions prior to 1.9.0 IntelliJ versions prior to 2.4.48 Visual Studio versions prior to 1.1.31 Eclipse versions prior to v20221115.132308 Language Server versions prior to v20221109.114426 Description...
Remote Code Execution via YAML editors in STS4 extensions for Eclipse and VSCode
Spring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring Boot Tools, Concourse CI Pipeline Editor, Bosh Editor and Cloudfoundry Manifest YML Support version 1.39.0 and below all use Snakeyaml library for YAML editing support. This library allows for some...
Vulnerabilities fixed in Microsoft Developer Tools
Vulnerabilities have been fixed in Microsoft Developer Tools. The vulnerabilities allow a local malicious person to perform attacks that result in the following categories of damage: Remote code execution User rights. Access to sensitive data Increased user privileges The tables below provide an...
Security Update for Microsoft Visual Studio Code (October 2022)
The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.72.1. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
CVE-2022-41083
Visual Studio Code Elevation of Privilege Vulnerability...
CVE-2022-41083
Visual Studio Code Elevation of Privilege Vulnerability...
CVE-2022-41083
Visual Studio Code Elevation of Privilege Vulnerability...
CVE-2022-41034
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2022-41034
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2022-41042
Visual Studio Code Information Disclosure Vulnerability...
CVE-2022-41042
Visual Studio Code Information Disclosure Vulnerability...
CVE-2022-41034
Visual Studio Code Remote Code Execution Vulnerability...
