CVE-2024-43488

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306

Affected software

Vendor	Product	Versions
Microsoft	Visual Studio Code	-

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43488Patch, Vendor Advisory

Timeline

Published: Oct 8, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-434898.8Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CVE-2024-43497.3A vulnerability has been found in SourceCodester Pisay Online E-Learning System 1.0 and classified as critical. Affected by this vulnerabili CVE-2024-434919.8Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Componen CVE-2024-434927.8Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability CVE-2024-434957.3Windows libarchive Remote Code Execution Vulnerability CVE-2024-434968.8Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CVE-2024-434977.8DeepSpeed Remote Code Execution Vulnerability CVE-2024-434989.8.NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-434997.5.NET and Visual Studio Denial of Service Vulnerability CVE-2024-43504.8Concrete CMS versions 9.0.0 to 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in RSS Displayer when user input is stored and later embe CVE-2024-435005.5Windows Resilient File System (ReFS) Information Disclosure Vulnerability CVE-2024-435017.8Windows Common Log File System Driver Elevation of Privilege Vulnerability