Not scored
CVE-2025-65717
No description published yet
Vendor not yet named
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
0.6%probability of exploitation in the next 30 days
Higher than 50% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page.
Coverage 3 articles · 3 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 18 Feb · 13:31 UTC | The Hacker News | Critical Flaws Found in Four VS Code Extensions with Over 125 Million Installs |
| Wed 18 Feb · 15:46 UTC | Security Affairs | VS Code extensions with 125M+ installs expose users to cyberattacks |
| Thu 19 Feb · 11:55 UTC | SOCRadar | Severe VS Code Extension CVEs Expose Developers to RCE and File Exfiltration |
- Severe VS Code Extension CVEs Expose Developers to RCE and File ExfiltrationSOCRadar · mentions it in passing
- VS Code extensions with 125M+ installs expose users to cyberattacksSecurity Affairs
- Critical Flaws Found in Four VS Code Extensions with Over 125 Million InstallsThe Hacker News · first in our coverage