Skip to content
OpenAdvisories
High MSRC-CVE-2022-24526 1 CVE

Visual Studio Code Spoofing Vulnerability

Published Mar 8, 2022 · Updated Mar 10, 2022 · Revision 2

Vendor: Microsoft

Summary

Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
The user would have be enticed to open a malicious file in vscode. Users should never open anything that they do not know or trust to be safe.

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
The user would have be enticed to open a malicious file in a directory. Users should never open anything that they do not know or trust to be safe.

Security updates
1.65.1 — https://code.visualstudio.com/updates/v1_65

Vulnerabilities 1

Revision history

  1. #2

    Updated FAQ information. This is an informational change only.

  2. #1

    Information published.

References