CVE-2022-30129

published 2022-05-10

CVE-2022-30129: Visual Studio Code Remote Code Execution Vulnerability

Priority P2 64 high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

Visual Studio Code Remote Code Execution Vulnerability

Affected

3 ranges

Vendor	Product	Version range	Fixed in
microsoft	visual_studio_code	< 1.67.1	1.67.1
microsoft	visual_studio_code	>= 1.0.0 < 1.67.1	1.67.1
msrc	visual_studio_code	—	—

Detection & IOCs extracted from sources · hover to see the quote

• → The attack vector requires a user to click a specially crafted URL; monitor for suspicious URI handler invocations targeting VS Code (e.g., vscode:// protocol links) originating from untrusted sources such as emails or web pages. ↗

• · Exploitation is assessed as 'Less Likely' for both latest and older software releases, and there is no public exploit or known in-the-wild exploitation as of the advisory date. ↗
• · Remediation requires updating Visual Studio Code to version 1.67 or later; the fix is documented in the v1_67 release notes. ↗

CVSS provenance

nvd v3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvd v2.0 6.8 MEDIUM AV:N/AC:M/Au:N/C:P/I:P/A:P

vendor_msrc 8.8 HIGH

vendor_oracle 6.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.