CVE-2021-28471 – Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2021-28471

13 Apr 2021 — Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota de Remote Development Extension para Visual Studio Code • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28471 •

CVE-2021-28469 – Visual Studio Code Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2021-28469

13 Apr 2021 — Visual Studio Code Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota de Visual Studio Code. Este ID de CVE es diferente de CVE-2021-28457, CVE-2021-28473, CVE-2021-28475, CVE-2021-28477 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28469 •

CVE-2021-28457 – Visual Studio Code Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2021-28457

13 Apr 2021 — Visual Studio Code Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota de Visual Studio Code. Este ID de CVE es diferente de CVE-2021-28469, CVE-2021-28473, CVE-2021-28475, CVE-2021-28477 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28457 •

CVE-2021-28967

https://notcve.org/view.php?id=CVE-2021-28967

24 Mar 2021 — The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings. La extensión no oficial de MATLAB versiones anteriores a 2.0.1 para Visual Studio Code, permite a atacantes ejecutar código arbitrario por medio de un workspace diseñado debido a un ajuste de configuración lint • https://github.com/Gimly/vscode-matlab/commit/fc5dc53397677464099e80629e785a25718bf5ec •

CVE-2020-17159 – Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2020-17159

09 Dec 2020 — Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability Vulnerabilidad de ejecución de código remota en Visual Studio Code Java Extension Pack • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17159 •

CVE-2020-17148 – Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2020-17148

09 Dec 2020 — Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability Vulnerabilidad de ejecución de código remota en la extensión de desarrollo de Visual Studio • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17148 •

CVE-2020-17150 – Visual Studio Code Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2020-17150

09 Dec 2020 — Visual Studio Code Remote Code Execution Vulnerability Vulnerabilidad de ejecución de código remota en Visual Studio • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17150 •

CVE-2020-16881 – Visual Studio JSON Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2020-16881

11 Sep 2020 —

A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

To exploit... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16881 •

CVE-2020-0604 – Visual Studio Code Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2020-0604

17 Aug 2020 — A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerabil... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0604 •

CVE-2020-1416

https://notcve.org/view.php?id=CVE-2020-1416

14 Jul 2020 — An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'. Se presenta una vulnerabilidad de elevación de privilegios en Visual Studio y Visual Studio Code cuando cargan dependencias de software, también se conoce como "Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability' • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1416 • CWE-269: Improper Privilege Management •