CVE-2020-17150 is a remote code execution vulnerability affecting Microsoft TSLint within Visual Studio Code. With a CVSS score of 7.8 (HIGH), this vulnerability allows an attacker to execute arbitrary code on an affected system, requiring user interaction (UI:R) and local access (AV:L) to achieve high impact on confidentiality, integrity, and availability. While the vulnerability has a high FAUCET Risk Score of 81/100 and an elevated EPSS score, there is currently no evidence of active exploitation, nor are public exploit tools like Metasploit or ExploitDB available. Community discussion and media coverage are minimal, suggesting limited public attention despite its severity.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.3.0CPE matchmatch criteria | cpe:2.3:a:microsoft:tslint:*:*:*:*:*:visual_studio_code:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.