Lucene search

K
MicrosoftVisual Studio Code

9 matches found

CVE
CVE
added 2020/09/11 5:15 p.m.940 views

CVE-2020-16881

A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with adminis...

9.3CVSS8AI score0.16964EPSS
CVE
CVE
added 2020/07/14 11:15 p.m.212 views

CVE-2020-1416

An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.

9.3CVSS8.7AI score0.10481EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.149 views

CVE-2020-16977

A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads a Jupyter notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user...

9.3CVSS7.2AI score0.05893EPSS
CVE
CVE
added 2021/05/11 7:15 p.m.113 views

CVE-2021-31214

Visual Studio Code Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.03045EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.104 views

CVE-2020-0604

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrativ...

9.3CVSS8.1AI score0.09238EPSS
CVE
CVE
added 2020/10/16 11:15 p.m.98 views

CVE-2020-17023

A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with adminis...

9.3CVSS7.8AI score0.18013EPSS
CVE
CVE
added 2024/10/08 6:15 p.m.87 views

CVE-2024-43488

Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.

9.8CVSS9.8AI score0.03347EPSS
CVE
CVE
added 2020/11/11 7:15 a.m.82 views

CVE-2020-17104

Visual Studio Code JSHint Extension Remote Code Execution Vulnerability

9.3CVSS7.9AI score0.08062EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.72 views

CVE-2019-0728

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visual Studio Code Remote Code Execution Vulnerability'.

9.3CVSS8.1AI score0.11573EPSS