CVE-2022-30129
Visual Studio Code Remote Code Execution Vulnerability
HIGH 8.8EPSS 41.3%
Visual Studio Code Remote Code Execution Vulnerability
- Affected
- Microsoft · Visual Studio Code
- CVSS v3.1 MICROSOFT
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P - EPSS
- 41.32% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2022-05-10
- Updated
- 2025-01-02
Proof-of-concept exploits (1)
- RoccoPearce/CVE-2022-301292★ · 2022-12-07
Security advisories
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30129
- https://blog.sonarsource.com/securing-developer-tools-argument-injection-in-vscode