What is CVE-2023-39956?

CVE-2023-39956 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Electron: CVE-2023-39956 -Visual Studio Code Remote Code Execution Vulnerability

Which CVE IDs does CVE-2023-39956 cover?

CVE-2023-39956 covers the following CVE IDs: CVE-2023-39956. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2023-39956?

CVE-2023-39956 affects 1 product, including: Visual Studio Code.

CVE-2023-39956High

Electron: CVE-2023-39956 -Visual Studio Code Remote Code Execution Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

September 12, 2023

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2023-39956 →

📋 Description

Why is this Electron CVE included in the Security Update Guide? The vulnerability assigned to this CVE is in Electron software which is consumed by Visual Studio Code. It is being documented in the Security Update Guide to announce that the latest build of Visual Studio Code is no longer vulnerable. Please see Security Update Guide Supports CVEs Assigned by Industry Partners for more information.

🎯 Affected products1

Visual Studio Code

✅ Remediation

KBRelease Notes (Security Update) — fixed build 1.81.2

🔗 References (3)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-39956
patchhttps://code.visualstudio.com/Download
referencehttps://code.visualstudio.com/updates/v1_81