CVE-2022-30129: Visual Studio Code Remote Code Execution Vulnerability
Published May 10, 2022
·Updated
Visual Studio Code Remote Code Execution Vulnerability.
Affected Software
2 affected componentsFixes available
Microsoft Visual Studio Code<1.67.1
Microsoft Visual Studio Code
Remediation
Event History
May 10, 2022
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·08:35 PM
Data Sourced
via MITRE·08:35 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2022-30129?
CVE-2022-30129 is a vulnerability in Visual Studio Code that allows remote code execution.
2
How severe is CVE-2022-30129?
CVE-2022-30129 has a severity rating of 8.8 (high).
3
Which versions of Visual Studio Code are affected by CVE-2022-30129?
Visual Studio Code versions up to and excluding 1.67.1 are affected by CVE-2022-30129.
4
How can I mitigate the CVE-2022-30129 vulnerability?
To mitigate the CVE-2022-30129 vulnerability, update your Visual Studio Code installation to version 1.67.1 or later.
5
Where can I find more information about CVE-2022-30129?
You can find more information about CVE-2022-30129 [here](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30129).