High · 7.8 CVE-2023-36867 EUVD-2023-40787GHSA-wqgm-j3cr-757w

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability

Published Jul 11, 2023 · Updated Jan 1, 2025 · Assigned by microsoft

Vendor: Microsoft Product: Visual Studio Code - GitHub Pull Requests and Issues Extension

Description

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Visual Studio Code - GitHub Pull Requests and Issues Extension	0.1.1 – < 0.66.2	0.66.2

Advisories 2

WID-SEC-2023-1722 Microsoft Developer Tools: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 10, 2023
MSRC-CVE-2023-36867 Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability Microsoft Security Response Center · Jul 11, 2023

References

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability vendor-advisory