CVE-2020-1171

The CVE-2020-1171 entry describes a remote code execution vulnerability in Visual Studio Code when the Python extension loads configuration files after opening a project. The root cause is tied to the Python extension’s handling of configuration files, enabling code execution in the context of th...

CVE-2020-1192

CVE-2020-1192 describes a remote code execution vulnerability in Visual Studio Code involving the Python extension loading workspace settings from a notebook file. The CVE is distinct from CVE-2020-1171. Public technical specifics (exact affected versions, root cause details, and patch/mitigation...

CVE-2024-49050

Technical details about CVE-2024-49050 are not publicly provided in the supplied documents; no concrete affected versions, root cause, or fixes are included. Monitor for official updates.

CVE-2025-49714

CVE-2025-49714 involves the Visual Studio Code Python Extension. The connected sources describe a trust boundary violation that can let an unauthorized attacker execute code locally, effectively a remote code execution scenario through the Python extension. The vulnerability is tied to Visual Stu...

CVE-2020-17163

CVE-2020-17163 affects the Visual Studio Code Python Extension. Multiple sources (including PT-2021-2504) describe a vulnerability due to incorrect code generation management that can lead to arbitrary code execution, with the CVSS vector indicating a LOCAL attack vector and user interaction requ...

CVE-2026-54981

The CVE-2026-54981 entry concerns the Visual Studio Code Python extension, where inclusion of functionality from an untrusted control sphere leads to a local security feature bypass. Affected component: VS Code Python extension; root cause described as untrusted control sphere function inclusion....