CVE Catalog

CVE-2023-33144

MediumCVSS 6.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.27%

66th percentile - higher than 66% of all known CVEs

Summary

A vulnerability in Visual Studio Code allows for spoofing, which may lead to unauthorized access to user data. An attacker can exploit this flaw to mislead the user into performing unsafe actions.

Risk Assessment

Organizations may be at risk of data theft or other unauthorized actions, potentially leading to serious legal and financial consequences.

Recommendation

It is recommended to update Visual Studio Code to the latest version to minimize the risk associated with this vulnerability. Users should also be aware of potential spoofing threats.

Original NVD description (English source)

Visual Studio Code Spoofing Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS