CVE-2019-0728: Critical severity visual studio code vulnerability
Published Mar 5, 2019
·Updated
A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visual Studio Code Remote Code Execution Vulnerability'.
Affected Software
1 affected component
Microsoft Visual Studio Code
Remediation
Event History
Mar 5, 2019
CVE Published
11:29 PM
Mar 6, 2019
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2019-0728?
CVE-2019-0728 is a remote code execution vulnerability in Visual Studio Code.
2
How does CVE-2019-0728 occur?
CVE-2019-0728 occurs when Visual Studio Code processes environment variables after opening a project.
3
What is the severity of CVE-2019-0728?
The severity of CVE-2019-0728 is critical (7.8).
4
Which software is affected by CVE-2019-0728?
Microsoft Visual Studio Code is affected by CVE-2019-0728.
5
How can I fix CVE-2019-0728?
To fix CVE-2019-0728, it is recommended to apply the latest security updates provided by Microsoft.