PT-2020-2696 · Microsoft · Windows+2

Ron Masas · Published 2020-05-12 · Updated 2025-07-08 · CVE-2020-1192

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Visual Studio Code (affected versions not specified)

Description A remote code execution issue exists when the Python extension loads workspace settings from a notebook file. This is due to insufficient input validation, which can allow an attacker to elevate their privileges. The vulnerability is part of a set of issues addressed by Microsoft patches, including over 100 vulnerabilities, 16 of which are critical. These patches affect various Microsoft products, including Office and Windows operating systems, and address issues such as privilege elevation, remote code execution, and denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-02764

CVE-2020-1192

Affected Products

Office

Visual Studio Code

Windows

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2020-1192 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1192 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1192 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02764 · Security Note
• https://t.me/cvenotify/128068 · Telegram Post
• https://t.me/cvenotify/128067 · Telegram Post
• https://t.me/cvenotify/4001 · Telegram Post
• https://t.me/sysadm_in_channel/1790 · Telegram Post