CVE-2021-28471 – Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2021-28471

13 Apr 2021 — Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota de Remote Development Extension para Visual Studio Code • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28471 •

CVE-2021-28469 – Visual Studio Code Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2021-28469

13 Apr 2021 — Visual Studio Code Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota de Visual Studio Code. Este ID de CVE es diferente de CVE-2021-28457, CVE-2021-28473, CVE-2021-28475, CVE-2021-28477 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28469 •

CVE-2021-28457 – Visual Studio Code Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2021-28457

13 Apr 2021 — Visual Studio Code Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota de Visual Studio Code. Este ID de CVE es diferente de CVE-2021-28469, CVE-2021-28473, CVE-2021-28475, CVE-2021-28477 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28457 •

CVE-2021-28967

https://notcve.org/view.php?id=CVE-2021-28967

24 Mar 2021 — The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings. La extensión no oficial de MATLAB versiones anteriores a 2.0.1 para Visual Studio Code, permite a atacantes ejecutar código arbitrario por medio de un workspace diseñado debido a un ajuste de configuración lint • https://github.com/Gimly/vscode-matlab/commit/fc5dc53397677464099e80629e785a25718bf5ec •

CVE-2020-17150 – Visual Studio Code Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2020-17150

09 Dec 2020 — Visual Studio Code Remote Code Execution Vulnerability Vulnerabilidad de ejecución de código remota en Visual Studio • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17150 •

CVE-2020-16881 – Visual Studio JSON Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2020-16881

11 Sep 2020 —

A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

To exploit... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16881 •

CVE-2020-1416

https://notcve.org/view.php?id=CVE-2020-1416

14 Jul 2020 — An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'. Se presenta una vulnerabilidad de elevación de privilegios en Visual Studio y Visual Studio Code cuando cargan dependencias de software, también se conoce como "Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability' • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1416 • CWE-269: Improper Privilege Management •

CVE-2020-1192

https://notcve.org/view.php?id=CVE-2020-1192

21 May 2020 — A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1171. Se presenta una vulnerabilidad de ejecución de código remota en Visual Studio Code cuando la extensión Python carga la configuración del espacio de trabajo desde un archivo notebook, también se conoce como "Visual Studio Code Python Extension Remote C... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1192 •

CVE-2020-1171

https://notcve.org/view.php?id=CVE-2020-1171

21 May 2020 — A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1192. Se presenta una vulnerabilidad de ejecución de código remota en Visual Studio Code cuando la extensión Python carga los archivos de configuración después de abrir un proyecto, también se conoce como "Visual Studio Code Python Extension Remote Code... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1171 •

CVE-2019-1414

https://notcve.org/view.php?id=CVE-2019-1414

24 Jan 2020 — An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to users of a local computer, aka 'Visual Studio Code Elevation of Privilege Vulnerability'. Se presenta una vulnerabilidad de elevación de privilegios en Visual Studio Code cuando expone un agente de escucha de depuración (debug listener) a usuarios de una computadora local, también se conoce como "Visual Studio Code Elevation of Privilege Vulnerability". • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1414 •