MSRC-CVE-2022-41083 — Visual Studio Code Elevation of Privilege Vulnerability

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could execute code in the context of another Visual Studio Code user on the vulnerable system.

Security updates
2022.9.1100000000 — https://github.com/microsoft/vscode-jupyter/blob/main/CHANGELOG.md

Vulnerabilities 1

High 7.8

CVE-2022-41083

Visual Studio Code Elevation of Privilege Vulnerability

Visual Studio Code Elevation of Privilege Vulnerability

Microsoft Jupyter Extension for Visual Studio Code

Oct 11, 2022

Revision history

2022-10-11 #1
Information published.

References

CVE-2022-41083 Visual Studio Code Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41083
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss