CVSS: 7.8EPSS: 41%CPEs: 1EXPL: 1CVE-2022-41034 – Visual Studio Code Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-41034
Visual Studio Code Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Visual Studio VSCode when opening a Jupyter notebook (.ipynb) file bypasses the trust model. On versions v1.4.0 through v1.71.1, its possible for the Jupyter notebook to embed HTML and javascript, which can then open new terminal windows within VSCode. Each of these new windows can then execute arbitrary code at startup. During testing, the first open of the Jupyter notebook resulted in pop-ups displaying errors of unable to find the payload exe file. The second attempt at opening the Jupyter notebook would result in successful execution. • https://github.com/andyhsu024/CVE-2022-41034 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41034 https://github.com/google/security-research/security/advisories/GHSA-pw56-c55x-cm9m •
CVSS: 8.8EPSS: 41%CPEs: 1EXPL: 2CVE-2022-30129 – Visual Studio Code Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-30129
Visual Studio Code Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota de Visual Studio • https://github.com/RoccoPearce/CVE-2022-30129 https://blog.sonarsource.com/securing-developer-tools-argument-injection-in-vscode https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30129 •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2022-24526 – Visual Studio Code Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2022-24526
Visual Studio Code Spoofing Vulnerability Una vulnerabilidad de Suplantación de Visual Studio Code • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24526 •
CVSS: 7.8EPSS: 10%CPEs: 1EXPL: 0CVE-2021-43891 – Visual Studio Code Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-43891
Visual Studio Code Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Visual Studio • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43891 •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-42322 – Visual Studio Code Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2021-42322
Visual Studio Code Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Visual Studio Code • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42322 • CWE-269: Improper Privilege Management •