Main
Vulnerability Database
Exploits
ID:7195 - Exploit for Code Injection in Visual Studio Code - CVE-2021-43891
ID:7195 - Exploit for Code Injection in Visual Studio Code - CVE-2021-43891
Published: December 21, 2021
Vulnerability identifier: #VU58945
Vulnerability risk: High
CVE-ID: CVE-2021-43891
CWE-ID: CWE-94
Exploitation vector: Remote access
Vulnerable software:
Visual Studio Code
Visual Studio Code
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to improper input validation in Visual Studio Code. A remote attacker can send a specially crafted request and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Remediation
Install updates from vendor's website.