title: Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability
description: Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability
problem types: Elevation of Privilege
affected:
{
vendor: Microsoft
product: .NET Education Bundle SDK Install Tool
cpes: cpe:2.3:a:microsoft:.net_education_bundle_sdk_install_tool:*:*:*:*:*:visual_studio_code:*:*
platforms: Unknown
versions:
version: 0.0.0, lessThan: 1.2.0, versionType: custom, status: affected
}
{
vendor: Microsoft
product: .NET Install Tool for Extension Authors
cpes: cpe:2.3:a:microsoft:.net_install_tool_for_extension_authors:*:*:*:*:*:visual_studio_code:*:*
platforms: Unknown
versions:
version: 1.0.0, lessThan: 0.7.0, versionType: custom, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
]