1542 matches found
PT-2021-2403 · Microsoft · Visual Studio Code Eslint Extension
Name of the Vulnerable Software and Affected Versions: Visual Studio Code ESLint Extension affected versions not specified Description: The issue is related to a lack of protection for internal data in the Microsoft Visual Studio Code ESLint Extension. Exploitation of this issue may allow an...
PT-2021-2416 · Microsoft · Quantum Development Kit
Name of the Vulnerable Software and Affected Versions: Microsoft Quantum Development Kit for Visual Studio Code affected versions not specified Description: The issue is related to a lack of protection for service data in the Microsoft Quantum Development Kit for Visual Studio Code. This can allo...
Microsoft Visual Studio Code 安全漏洞
Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A security vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected: Visual Studio Code - Java Extension Pack...
PT-2021-2297 · Microsoft · Visual Studio Code Java Extension Pack
Name of the Vulnerable Software and Affected Versions: Visual Studio Code Java Extension Pack affected versions not specified Description: The issue is related to incorrect code generation management in the Visual Studio Code Java Extension Pack. Exploitation of this issue may allow a remote...
KLA12110 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio Code ESLint Extension can be exploited remotely to...
Microsoft Visual Studio Code 安全漏洞
Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A security vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected: Visual Studio Code...
PT-2021-2296 · Microsoft · Visual Studio Code Remote Development Extension
Name of the Vulnerable Software and Affected Versions: Visual Studio Code Remote Development Extension affected versions not specified Description: The issue is related to incorrect code generation management in the Remote Development Extension for Visual Studio Code. Exploitation of this issue m...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed multiple vulnerabilities in Visual Studio and Visual Studio Code. The vulnerabilities allow a malicious person able to execute arbitrary code under the privileges of the user. The vulnerability with reference CVE-2021-21300 has been classified by Microsoft rated "Critical" the...
Microsoft Visual Studio Code 安全漏洞
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected: Microsoft Quantum Development Kit for Visual Studio Code...
CVE-2021-26700
Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...
CVE-2021-26700
Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...
CVE-2021-1639
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-1639
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-26700
Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...
Remote code execution
Visual Studio Code Remote Code Execution Vulnerability...
Remote code execution
Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...
CVE-2021-26700 Visual Studio Code npm-script Extension Remote Code Execution Vulnerability
...
CVE-2021-26700
The CVE affects the Visual Studio Code npm-script Extension (eg2.vscode-npm-script). A malicious project can cause the extension to execute commands when a user views package.json, via a crafted repository and settings.json, enabling remote code execution in the user’s context. Public exploitatio...
CVE-2021-1639
CVE-2021-1639 appears as a Visual Studio Code remote code execution vulnerability. Connected sources confirm Visual Studio Code is affected and note public exploits exist (Kaspersky). The documents provide high-severity impact for this CVE but do not consistently expose concrete root-cause detail...