CVE-2024-43601

Summary

CVE-2024-43601 is a newly disclosed vulnerability affecting Visual Studio Code for Linux. This issue permits an attacker to execute arbitrary code remotely, posing a significant risk to systems running the affected software. The vulnerability is due to a misconfiguration in the Remote Development Extension Pack, allowing unauthenticated users to bypass security restrictions and execute malicious commands. Microsoft has released a patch to mitigate the risk, and users are strongly encouraged to update their software as soon as possible to protect against potential exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.