First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-41034

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Visual Studio Code Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Visual Studio Code	>= 1.0.0, < 1.72.1

References

Timeline

Published: Oct 11, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-410355.3Microsoft Edge (Chromium-based) Spoofing Vulnerability CVE-2022-410368.8Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2022-410378.8Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2022-410388.8Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2022-410398.1Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability CVE-2022-41045.5A loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compression tool, resulting in CVE-2022-410408.8Microsoft Exchange Server Elevation of Privilege Vulnerability CVE-2022-410427.4Visual Studio Code Information Disclosure Vulnerability CVE-2022-410433.3Microsoft Office Information Disclosure Vulnerability CVE-2022-410448.1Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability CVE-2022-410457.8Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability CVE-2022-410478.8Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2022-41034: High severity, CVSS 7.8 | Vulnix