Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild
60
CVE-2024-43488
—CVSS 3.1
9.8 critical
EPSS
1%p65
Published
()
Modified
Description
Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.
- Vendors
- microsoft
- Products
- visual studio code
- Weakness
- CWE-306
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news3 stories
Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities
60
Microsoft patches two zero-days exploited in the wild (CVE-2024-43573, CVE-2024-43572)
60