Python
by Microsoft
CVEs (6)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-1171 | Hig | 0.58 | 8.8 | 0.05 | May 21, 2020 | A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current… | ||
| CVE-2024-49050 | Hig | 0.57 | 8.8 | 0.01 | Nov 12, 2024 | Visual Studio Code Python Extension Remote Code Execution Vulnerability | ||
| CVE-2020-1192 | Hig | 0.52 | 7.8 | 0.04 | May 21, 2020 | A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user… | ||
| CVE-2026-54981 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally. | ||
| CVE-2025-49714 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally. | ||
| CVE-2020-17163 | Hig | 0.51 | 7.8 | 0.01 | Dec 29, 2023 | Visual Studio Code Python Extension Remote Code Execution Vulnerability |
- risk 0.58cvss 8.8epss 0.05
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current…
- risk 0.57cvss 8.8epss 0.01
Visual Studio Code Python Extension Remote Code Execution Vulnerability
- risk 0.52cvss 7.8epss 0.04
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user…
- risk 0.51cvss 7.8epss 0.00
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.
- risk 0.51cvss 7.8epss 0.00
Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.01
Visual Studio Code Python Extension Remote Code Execution Vulnerability