VSCode Vulnerabilities - Thomas Chauchefoin, Paul Gerste - PSW #804

Sonar Vulnerability Researchers Thomas Chauchefoin and Paul Gerste conducted research on the security of Visual Studio Code — the most popular code editor out there — which was presented at DEF CON 31 in August. The pair uncovered a few ways for attackers to gain code execution on a victim's computer if they clicked on a specially crafted link or opened a malicious folder in Visual Studio Code, bypassing existing mitigations like Workspace Trust. Developers tend to trust their IDEs …

attackers august code code execution con def def con def con 31 editor paul popular psw research researchers security sonar studio thomas uncovered victim visual studio visual studio code vscode vulnerabilities vulnerability