Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2021-43908: Remote code execution in VSCode restricted mode

hacktron.ai | vulnerability | CVE-2021-43908 | #rce | #vulnerability-research | #webview | #vscode | #csp-bypass | #cve-2021-43908

Summary

This research chains origin leaks, CSP bypasses, and flawed webview message handlers to gain remote code execution in Visual Studio Code even with Restricted Mode enabled.
CVE
CVE-2021-43908
Published
Collected

original ↗

Related coverage

vulnerability · blog.trailofbits.com
Escaping misconfigured VSCode extensions
Part one of the series: three vulnerabilities in Microsoft's SARIF Viewer and Live Preview VSCode extensions enabling local file theft, plus the $7,500-bounty CVE-2022-41042 mitigation bypass.
vulnerability · idnsec.com
[CVE-2026-93485] Comment2XSS: Zero-Click Pre-Auth XSS to Potential RCE in WordPress Core
An unauthenticated stored XSS (CVE-2026-93485) in WordPress core's wpautop() turns crafted comments into zero-click XSS, escalating to RCE via the admin session. Fixed in 7.1.1, backported to 4.7.36.
blog · blog.trailofbits.com
Escaping well-configured VSCode extensions (for profit)
Part two of the series: bypassing a Webview's localResourceRoots via URL parsing differences in VSCode's Electron browser to read arbitrary files; fixed as CVE-2022-41042 with a $7,500 bounty.
research · starlabs.sg
Dirty Cert: Cisco Smart Software Manager's Silently Patched RCE
Post-auth RCE in Cisco Smart Software Manager (CSSM): command injection in nginx certificate upload, where openssl checks run via childProcess.execSync. Cisco silently patched it in 10-202608.
research · idnsec.com
Mitigating RCE Impact Like in OpenAI Hack with Defense-in-Depth
Using HacktronAI's OpenAI Discourse hack disclosure, this article covers sandboxing, runtime protection, and AI-assisted defense to shrink the blast radius of RCE across interconnected apps.
blog · projectzero.google
Taming the wild copy: Parallel Thread Corruption
A Google Project Zero post on a 'wild copy' parallel thread memory corruption bug and its exploitation.
back