Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/03/15 12:0 a.m.1 views

The vulnerability of the Intel VTune Profiler performance analyzer and the Intel oneAPI Base Toolkit software development tools is related to an uncontrolled element in the search process, allowing attackers to exploit their privileges.

The vulnerability of the Intel VTune Profiler performance analyzer and the Intel oneAPI Base Toolkit software development tools is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.0014EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/15 12:0 a.m.2 views

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.00299EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/15 12:0 a.m.1 views

The vulnerability of the Mozilla Firefox browser on Android operating systems, related to the use of open redirection, allows a hacker to redirect users to any desired URL address.

The vulnerability of the Mozilla Firefox browser on Android operating systems is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to redirect a user to any desired URL address remotely...

6.4CVSS5.4AI score0.05821EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/15 12:0 a.m.4 views

The vulnerability of the Intel Graphics Performance Analyzer (Intel GPA)’s set of utilities is related to an uncontrolled search path element, which allows a malicious actor to escalate their privileges.

The vulnerability of the Intel Graphics Performance Analyzer Intel GPA utility is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.00139EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of the Kernel Streaming Service Driver for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kernel Streaming Service Driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.8AI score0.0065EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.3 views

The vulnerability of the MapUrlToZone component in the Windows operating system, which allows a hacker to circumvent existing security restrictions

The vulnerability of the MapUrlToZone component in the Windows operating system is related to incorrect path equivalence resolution. Exploiting this vulnerability can allow a remote attacker to bypass existing security restrictions...

5CVSS7.6AI score0.02983EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of Microprogramming Software in the Wiren Board controller, related to access control errors, allows a intruder to execute arbitrary commands.

The vulnerability of Microprogramming software for Wiren Boards, related to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending a specially crafted URL command remotely...

10CVSS5.9AI score
Exploits0Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.3 views

The vulnerability of Microprogramming software for Wiren Boards, related to the lack of authentication for critical web services, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the Microprogramming Software of the Wiren Board controller is related to the lack of ability to authenticate with the critical web service. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

10CVSS5.5AI score
Exploits0Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.3 views

The vulnerability of Microsoft Office and 365 Apps for Enterprise applications relates to the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00549EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of Microsoft Office packages, WordL, and 365 Apps for Enterprise lies in the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00655EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00669EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of the FreeType font rendering library, related to reading beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the FreeType font rendering library relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by sending a specially crafted file containing variable fonts...

8.1CVSS8AI score0.23357EPSS
Exploits0References18Affected Software11
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of the unserialize function in the Aspro content management platform allows attackers to execute arbitrary code. This vulnerability stems from defects in the deserialization mechanism.

The vulnerability of the unserialize function in the Aspro content management platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted POST request...

8.5CVSS6.1AI score
Exploits0References4Affected Software15
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of the axios library, related to insufficient validation of requests on the server side, allows a attacker to perform an SSRF attack.

The vulnerability of the axios library is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...

7.8CVSS6.6AI score0.00759EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.4 views

The vulnerability of Juniper Networks Junos OS’ kernel, related to insufficient spatial partitioning, allows a hacker to execute arbitrary code.

The vulnerability of Juniper Networks Junos OS’s kernel is related to insufficient spatial partitioning. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted file...

5.7CVSS7.3AI score0.01657EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of Microsoft Surface sensor display microprogramming software, related to insufficient validation of input data, allows a hacker to bypass security functions.

The vulnerability of Microsoft Surface sensor display software is related to insufficient testing of input data. Exploiting this vulnerability could allow a remote attacker to bypass security measures...

7.1CVSS7.7AI score0.00823EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.1 views

The vulnerability of the Windows Common Log File System Driver in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Common Log File System Driver in the operating system is related to a lack of data type conversion mechanisms. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.6AI score0.00497EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.3 views

The vulnerability of the Local Security Authority (LSA) service, which is responsible for authenticating users and managing local security policies in Windows operating systems, allows attackers to escalate their privileges.

The vulnerability of the Local Security Authority LSA in Windows operating systems, which is responsible for verifying identities and managing user policies, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

7.8CVSS7.5AI score0.00497EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.3 views

The vulnerability of Microprogramming Software in the Wiren Board controller lies in the lack of implementation for authentication when changing access rights, allowing attackers to escalate their privileges.

The vulnerability of the Microprogramming Software of the Wiren Board controller is related to the absence of authentication mechanisms for changing access rights. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

10CVSS5.5AI score
Exploits0Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of the Cross Device Service on the Windows operating system allows attackers to increase their privileges.

The vulnerability of the Cross Device Service on the Windows operating system is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.3CVSS7.2AI score0.0279EPSS
Exploits3References3
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of the multi-purpose debugger WinDbg, related to errors in checking cryptographic signatures, allows a hacker to execute remote code.

The vulnerability of the multi-purpose debugger WinDbg is related to errors in checking the cryptographic signature. Exploiting this vulnerability can allow a remote attacker to execute malicious code remotely...

7.5CVSS7.8AI score0.00851EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of the Iced training platform’s classes allows a hacker to execute arbitrary code.

The vulnerability of the Iced training platform for machine learning H2O is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS8.4AI score0.00643EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of Microsoft Office and 365 Apps for Enterprise applications relates to buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the overflowing of buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00909EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.4 views

The vulnerability of Microsoft Office and 365 Apps for Enterprise packages, related to the misuse of a trusted pointer, allows an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of an untrusted pointer. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00655EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.11 views

The vulnerability of the SINAMICS S200 servo-system loader, related to deficiencies in authentication procedures, allows a perpetrator to execute arbitrary code.

The vulnerability of the SINAMICS S200 servo drive system’s loader is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS8.4AI score0.00513EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.3 views

The vulnerability of Adobe InDesign’s automation tool for computer design, related to reading data beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS6.2AI score0.00277EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.1 views

The vulnerability of the BT Controller component of Qualcomm’s embedded software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the BT Controller component in the microprogramming software of Qualcomm’s integrated chips is related to data encryption errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

8.5CVSS5.5AI score0.00147EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of Adobe InDesign’s automation tool for computer design lies in the possibility of buffer overflow in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS5.9AI score0.00315EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise lies in the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7CVSS7.9AI score0.00536EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of the compatibility subsystem’s kernel allows for the execution of Linux applications on Windows operating systems through the Windows Subsystem for Linux (WSL2). This enables attackers to execute arbitrary code.

The vulnerability in the kernel of the compatibility subsystem for running Linux applications, namely Windows Subsystem for Linux WSL2 on Windows operating systems, involves a pointer manipulation issue. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.4CVSS7.9AI score0.00653EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.1 views

The vulnerability of Microsoft Office and 365 Apps for Enterprise applications relates to the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00655EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of the software for managing assets and processes in Cityworks and Cityworks with Office Companion, related to deficiencies in deserialization mechanisms, allows attackers to execute remote code.

The vulnerability of the Cityworks and Cityworks with Office Companion asset management and process management software lies in the deficiencies of the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute malicious code remotely...

9CVSS7.7AI score0.27426EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of Microprogramming Software in Control Boards is related to the presence of vulnerabilities in the borrowed components. This allows attackers to compromise the confidentiality and accessibility of the protected information.

The vulnerability of Microprogramming Software in the Wiren Board controller is related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities can allow a malicious actor, operating remotely, to compromise the confidentiality and accessibility of the...

9.4CVSS5.5AI score
Exploits0Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.3 views

The vulnerability of the Kernel Streaming Service Driver for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kernel Streaming Service Driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.8AI score0.0065EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.1 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in buffer overflows in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00645EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00655EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.2 views

The vulnerability of the Default Header Filtering component in the Apache Camel framework, which is related to insufficient registry checks, allows attackers to influence the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the Default Header Filtering component in the Java framework of Apache Camel is related to insufficient registration checks. Exploiting this vulnerability allows an attacker to influence the integrity, availability, and confidentiality of the protected information...

5.6CVSS6.8AI score0.79817EPSS
Exploits3References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.3 views

The vulnerability of the DCM files on the medical image and data management system, as well as the Sante PACS Server, allows a perpetrator to trigger a service failure.

The vulnerability of the DCM files on the medical image and data management system, as well as those on the Sante PACS Server, is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.2AI score0.0093EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.1 views

The vulnerability of the DevTools set of tools for web development in Google Chrome allows a hacker to bypass security restrictions.

The vulnerability of the DevTools set of tools for web development in the Google Chrome browser is related to an incorrect path name limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...

9.4CVSS6.8AI score0.00415EPSS
Exploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.3 views

The vulnerability of the USB-Audio component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the USB-Audio component in the Linux operating system’s kernel is related to errors in reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

3.5CVSS7.2AI score0.03558EPSS
Exploits0References22Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.1 views

The vulnerability of Zoom video conferencing software, related to improper assignment of ownership rights, allows a violator to disclose protected information.

The vulnerability of Zoom video conferencing software is related to the improper assignment of ownership rights. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

6.8CVSS5.4AI score0.00292EPSS
Exploits0References2Affected Software12
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.3 views

The vulnerability of the nnq_Sigmoid() function in the Quantized Sigmoid Module framework of the PyTorch machine learning library allows attackers to exploit it to compromise the integrity of protected information.

The vulnerability of the nnqSigmoid function in the Quantized Sigmoid Module of the PyTorch machine learning framework is related to incorrect initialization of resources when processing parameters scale and zeropoint. Exploiting this vulnerability can allow attackers to compromise the integrity ...

2.5CVSS5.5AI score0.00233EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.3 views

The vulnerability of the Golang programming language, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to user credentials.

The vulnerability of the Golang programming language is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to account information...

6.4CVSS6.7AI score0.0062EPSS
Exploits0References7Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.2 views

The vulnerability of the PCX Image development platform’s SDP code base allows attackers to trigger a service failure.

The vulnerability of the PCX Image development platform’s SDP is related to improper validation of the specified data type. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.8CVSS5.4AI score0.00551EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.2 views

Vulnerability of the pam_sm_authenticate() function in the Yubico PAM module, pam-u2f, which allows a intruder to elevate their privileges

The vulnerability of the pamsmauthenticate function in the Yubico PAM module, specifically in pam-u2f, is related to the return of an incorrect status code. Exploiting this vulnerability could allow attackers to increase their privileges...

7.8CVSS8AI score0.00397EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.2 views

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, are related to information representation errors in the user interface. These vulnerabilities allow attackers to influence the integrity of protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, are related to information representation errors in the user interface. Exploiting these vulnerabilities can allow an attacker to influence the integrity of protected information...

5CVSS6.8AI score0.00316EPSS
Exploits0References20Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.3 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, is related to reading data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, is related to reading data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.5CVSS7.7AI score0.00312EPSS
Exploits0References20Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.3 views

The vulnerability of the Model.load_model function in the Keras library allows a hacker to execute arbitrary code.

The vulnerability of the Model.loadmodel function in the Keras library is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

8.2CVSS6.7AI score0.02803EPSS
Exploits3References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.1 views

The command-line interface vulnerability of the FortiSandbox system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the command-line interface of the FortiSandbox threat detection and removal system is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

4.6CVSS5.5AI score0.00138EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.3 views

The vulnerability of Visual Studio Code’s source editor lies in its uncontrolled pathfinding mechanism, which allows attackers to escalate their privileges.

The vulnerability of Visual Studio Code’s source editor is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

7.3CVSS7.9AI score0.00525EPSS
Exploits0References2
Total number of security vulnerabilities74701