CVE-2022-41042

7 documents4 sources
Severity
7.4HIGH
EPSS
2.7%
top 14.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Visual Studio Code
Timeline
PublishedOct 11
Latest updateFeb 23

Description

Visual Studio Code Information Disclosure Vulnerability

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:NExploitability: 2.8 | Impact: 4.0

Affected Packages1 packages

▶CVEListV5microsoft/visual_studio_code1.0.0 — 1.72.1

Patches

Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

1
CVEList
Visual Studio Code Information Disclosure Vulnerability↗2022-10-11
▶

📋Vendor Advisories

1
Microsoft
Visual Studio Code Information Disclosure Vulnerability↗2022-10-11
▶

🕵️Threat Intelligence

3
Trailofbits
Escaping well-configured VSCode extensions (for profit)↗2023-02-23
▶
Trailofbits
Escaping misconfigured VSCode extensions↗2023-02-21
▶
Trailofbits
Escaping misconfigured VSCode extensions↗2023-02-21
▶