There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML
    and CSS. Electron apps that are launched as command line executables are impacted. Specifically this issue
    can only be exploited if the following conditions are met: 1. The app is launched with an attacker-
    controlled working directory and 2. The attacker has the ability to write files to that working directory.
    This makes the risk quite low, in fact normally issues of this kind are considered outside of our threat
    model as similar to Chromium we exclude Physically Local Attacks but given the ability for this issue to
    bypass certain protections like ASAR Integrity it is being treated with higher importance. This issue has
    been fixed in versions:`26.0.0-beta.13`, `25.4.1`, `24.7.1`, `23.3.13`, and `22.3.19`. There are no app
    side workarounds, users must update to a patched version of Electron. (CVE-2023-39956)

遠端主機上安裝的 Microsoft Visual Studio Code 版本是早於 1.82.1 的版本。因此受到多個遠端程式碼執行弱點影響。攻擊者可利用此弱點，繞過驗證並執行未經授權的任意命令。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本作出判斷

远程主机上安装的 Microsoft Visual Studio Code 版本低于 1.82.1。因而会受到多个远程代码执行漏洞的影响。攻击者可利用此漏洞绕过身份验证并执行未经授权的任意命令。

请注意，Nessus 并未测试这些问题，而是仅依据应用程序自我报告的版本

リモートのホストにインストールされている Microsoft Visual Studio Code のバージョンは、1.82.1 より前です。したがって、リモートでコードが実行される複数の脆弱性の影響を受けます。攻撃者がこれを悪用して認証をバイパスし、認証されていない任意のコマンドを実行する可能性があります。

Nessus はこれらの問題のテストを行っておらず、代わりにアプリケーションの自己報告されたバージョンにのみ依存しています。

The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.82.1. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
412334	SCA: security update for electron (GHSA-7x97-j373-85x5)	Tenable Cloud Security	SCA Checks	2025/1/23	2026/7/2	medium
412334	SCA: security update for electron (GHSA-7x97-j373-85x5)	Tenable Self-Hosted Container Security	SCA Checks	2025/1/23	2026/7/2	medium
181339	Microsoft Visual Studio Code 安全性更新 (2023 年 9 月)	Nessus	Misc.	2023/9/13	2026/6/16	high
181339	Microsoft Visual Studio Code 的安全更新（2023 年 9 月）	Nessus	Misc.	2023/9/13	2026/6/16	high
181339	Microsoft Visual Studio Code のセキュリティ更新プログラム (2023 年 9 月)	Nessus	Misc.	2023/9/13	2026/6/16	high
181339	Security Update for Microsoft Visual Studio Code (September 2023)	Nessus	Misc.	2023/9/13	2026/6/16	high

检测

插件搜索

medium

medium

high

high

high

high