DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Visual Studio und Visual Studio Code: Mehrere Schwachstellen
view advisory published 2025-02-11
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio Code und Microsoft Visual Studio ausnutzen, um seine Privilegien zu erhöhen und um Code auszuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-24042US | — | — | ||
Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability | ||||
| CVE-2025-24039US | — | — | ||
Visual Studio Code Elevation of Privilege Vulnerability | ||||
| CVE-2025-21206US | — | — | ||
Visual Studio Installer Elevation of Privilege Vulnerability | ||||
| CVE-2023-32002US | critical9.8OT elevated | — | ||
The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module.
This vulnerability affects all users usin… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan