VDB
BDU%3A2024-08226
BDU%3A2024-08226
PUBLISHED
CVSS 10 CRITICAL
Уязвимость расширения Visual Studio Code extension for Arduino редактора исходного кода Visual Studio Code, связанная с отсутствием аутентификации для критичной функции, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| microsoft | visual_studio_code | - |
| Microsoft | Visual Studio Code | - |
| Microsoft Corp | Visual Studio Code, Visual Studio Code extension for Arduino |
Timeline
- Oct 8, 2024 CVE Published
- Oct 8, 2024 PoC Published
- Oct 9, 2024 PoC Published
- Nov 14, 2024 CVE Updated
- Jan 23, 2025 PoC Published
- Jun 16, 2025 PoC Published
- Jul 6, 2026 PoC Published
- Jul 26, 2026 PoC Published
- Jul 27, 2026 PoC Published
- Jul 28, 2026 PoC Published