First published: Fri Jan 24 2020(Updated: )
An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to users of a local computer, aka 'Visual Studio Code Elevation of Privilege Vulnerability'.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Visual Studio Code | <1.39 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-1414 is an elevation of privilege vulnerability in Visual Studio Code that exposes a debug listener to users of a local computer.
CVE-2019-1414 has a severity rating of 7.8, which is considered high.
Microsoft Visual Studio Code versions up to 1.39 are affected by CVE-2019-1414.
To fix CVE-2019-1414, it is recommended to update to a version of Microsoft Visual Studio Code that is higher than 1.39.
More information about CVE-2019-1414 can be found at the following link: [link](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1414)