Msrc Visual Studio Code vulnerabilities
49 known vulnerabilities affecting msrc/visual_studio_code.
Total CVEs
49
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH41MEDIUM7
Vulnerabilities
Page 3 of 3
CVE-2021-1639HIGHCVSS 7.02021-02-09
CVE-2021-1639 [HIGH] Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
Visual Studio: Visual Studio
Microsoft: Microsoft
Impact: Remote Code Execution
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Remediation: Release Notes
Reference: http://aka.ms/vs/16/release/latest
Reference: https://code.visualstudio.com/Download
Re
msrc
CVE-2020-17104HIGHCVSS 7.82020-11-10
CVE-2020-17104 [HIGH] Visual Studio Code JSHint Extension Remote Code Execution Vulnerability
Visual Studio Code JSHint Extension Remote Code Execution Vulnerability
Visual Studio: Visual Studio
Microsoft: Microsoft
Customer Action Required: Yes
Impact: Remote Code Execution
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Remediation: Release Notes
Reference: https://marketplace.vis
msrc
CVE-2020-17023HIGHCVSS 7.82020-10-13
CVE-2020-17023 [HIGH] Visual Studio JSON Remote Code Execution Vulnerability
Visual Studio JSON Remote Code Execution Vulnerability
Description: A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of
msrc
CVE-2020-16881HIGHCVSS 7.82020-09-08
CVE-2020-16881 [HIGH] Visual Studio JSON Remote Code Execution Vulnerability
Visual Studio JSON Remote Code Execution Vulnerability
Description: A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of
msrc
CVE-2020-0604HIGHCVSS 7.82020-08-11
CVE-2020-0604 [HIGH] Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
Description: A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the aff
msrc
CVE-2020-1416HIGHCVSS 8.82020-07-14
CVE-2020-1416 [HIGH] Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability
Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability
Description: An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies. A local attacker who successfully exploited the vulnerability could inject arbitrary code to run in the context of the current user. If the current user is logged on with administrative user r
msrc
CVE-2020-1192CRITICALCVSS 7.82020-05-12
CVE-2020-1192 [HIGH] Visual Studio Code Python Extension Remote Code Execution Vulnerability
Visual Studio Code Python Extension Remote Code Execution Vulnerability
Description: A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user right
msrc
CVE-2019-1414HIGHCVSS 7.82019-10-08
CVE-2019-1414 [HIGH] Visual Studio Code Elevation of Privilege Vulnerability
Visual Studio Code Elevation of Privilege Vulnerability
Description: An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to users of a local computer. A local attacker who successfully exploited the vulnerability could inject arbitrary code to run in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take
msrc
CVE-2019-0728HIGHCVSS 7.82019-02-12
CVE-2019-0728 [HIGH] Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
Description: A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the aff
msrc
← Previous3 / 3