Vulnerabilities > Microsoft > Codeql > 1.0.0

DATE CVE VULNERABILITY TITLE RISK
2019-11-25 CVE-2019-16765 Unspecified vulnerability in Microsoft Codeql 1.0.0
If an attacker can get a user to open a specially prepared directory tree as a workspace in Visual Studio Code with the CodeQL extension active, arbitrary code of the attacker's choosing may be executed on the user's behalf.
network
microsoft
6.8