Rewterz Threat Advisory – CVE-2023-29338 – Microsoft Visual Studio Code Vulnerability

Severity

Medium

Analysis Summary

CVE-2023-29338

Microsoft Visual Studio Code could allow a remote authenticated attacker to obtain sensitive information. By persuading a victim to open a specially crafted file, an attacker could exploit this vulnerability to obtain NTLM hashes and use this information to launch further attacks against the affected system.

Impact

• Information Disclosure

Indicators Of Compromise

CVE

• CVE-2023-29338

Affected Vendors

Microsoft

Affected Products

• Microsoft Visual Studio Code

Remediation

Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.

Microsoft Security TechCenter