Visual Studio Code Python Extension

CVEs (8)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-1481	Microsoft Eslint	Hig	0.59	8.8	0.24	Jul 14, 2020	A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project, aka 'Visual Studio Code ESLint Extention Remote Code Execution Vulnerability'.
CVE-2020-1171	Microsoft Python	Hig	0.58	8.8	0.14	May 21, 2020	A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1192.
CVE-2024-49050	Microsoft Python	Hig	0.57	8.8	0.01	Nov 12, 2024	Visual Studio Code Python Extension Remote Code Execution Vulnerability
CVE-2020-1192	Microsoft Python	Hig	0.52	7.8	0.12	May 21, 2020	A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1171.
CVE-2026-54981	Microsoft Visual Studio Code Python Extension	Hig	0.51	7.8	—	Aug 11, 2026	Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-49714	Microsoft Python	Hig	0.51	7.8	0.00	Jul 8, 2025	Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally.
CVE-2020-17163	Microsoft Python	Hig	0.51	7.8	0.01	Dec 29, 2023	Visual Studio Code Python Extension Remote Code Execution Vulnerability
CVE-2021-27081	Microsoft Eslint	Hig	0.51	7.8	0.04	Mar 11, 2021	Visual Studio Code ESLint Extension Remote Code Execution Vulnerability

CVE-2020-1481HigJul 14, 2020
Microsoft
Eslint
risk 0.59cvss 8.8epss 0.24
A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project, aka 'Visual Studio Code ESLint Extention Remote Code Execution Vulnerability'.
CVE-2020-1171HigMay 21, 2020
Microsoft
Python
risk 0.58cvss 8.8epss 0.14
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1192.
CVE-2024-49050HigNov 12, 2024
Microsoft
Python
risk 0.57cvss 8.8epss 0.01
Visual Studio Code Python Extension Remote Code Execution Vulnerability
CVE-2020-1192HigMay 21, 2020
Microsoft
Python
risk 0.52cvss 7.8epss 0.12
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1171.
CVE-2026-54981HigAug 11, 2026
Microsoft
Visual Studio Code Python Extension
risk 0.51cvss 7.8epss —
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-49714HigJul 8, 2025
Microsoft
Python
risk 0.51cvss 7.8epss 0.00
Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally.
CVE-2020-17163HigDec 29, 2023
Microsoft
Python
risk 0.51cvss 7.8epss 0.01
Visual Studio Code Python Extension Remote Code Execution Vulnerability
CVE-2021-27081HigMar 11, 2021
Microsoft
Eslint
risk 0.51cvss 7.8epss 0.04
Visual Studio Code ESLint Extension Remote Code Execution Vulnerability