What is CVE-2021-34529?

CVE-2021-34529 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Visual Studio Code Remote Code Execution Vulnerability

Which CVE IDs does CVE-2021-34529 cover?

CVE-2021-34529 covers the following CVE IDs: CVE-2021-34529. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-34529?

CVE-2021-34529 has a CVSS v3 base score of 7.8, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-34529?

CVE-2021-34529 affects 1 product, including: Visual Studio Code.

CVE-2021-34529HighCVSS 7.8

Visual Studio Code Remote Code Execution Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

July 13, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-34529 →

📋 Description

How does Visual Studio Code protect against remote code execution vulnerabilities in extensions? With the release of Visual Studio Code 1.57, a new feature was added called Workspace Trust. This new feature allows developers to open unfamiliar code or extensions in Restricted Mode with the option to later mark the code as trusted. Restricted Mode works to prevent the automatic execution of code by restricting accessing to certain VS Code features. More details about this new functionality can be found here - https://code.visualstudio.com/updates/v1_57#_workspace-trust.

🎯 Affected products1

Visual Studio Code

✅ Remediation

Security Update — fixed build 1.57.1

🔗 References (3)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34529
patchhttps://code.visualstudio.com/Download
referencehttps://code.visualstudio.com/updates/v1_57