Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network.
| Vendor | Product | Versions |
|---|---|---|
| microsoft | visual_studio_code | 0.27.0, 1.0.0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| canonical | ubuntu linux | cert_advisory | 90% |
| microsoft | microsoft visual studio code | cert_advisory | 90% |
| microsoft | visual studio | cert_advisory | 90% |
| microsoft | .net framework | cert_advisory | 90% |