CVE-2024-49049 is an Elevation of Privilege vulnerability affecting the Microsoft Visual Studio Code Remote Extension, specifically the remote_ssh component. With a CVSS score of 7.1 (HIGH), it allows a local, low-privileged attacker to achieve high confidentiality and integrity impacts with low attack complexity. While not currently listed in CISA's KEV catalog, there is no public exploit code available, and community discussion and media coverage are minimal, with only one article from BleepingComputer mentioning it as part of Microsoft's November 2024 Patch Tuesday.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 0.115.1CPE matchmatch criteria | cpe:2.3:a:microsoft:remote_ssh:*:*:*:*:*:visual_studio_code:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.