Dec 2020: Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
CVE-2020-17159 Published on December 10, 2020

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

Vendor Advisory NVD


Products Associated with CVE-2020-17159

stack.watch emails you whenever new vulnerabilities are published in Microsoft Visual Studio Code or Red Hat Language Support For Java. Just hit a watch button to start following.

 
 

Affected Versions

Microsoft Visual Studio Code Language Support for Java Extension:

Exploit Probability

EPSS
8.74%
Percentile
92.38%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.