Microsoft Python extension for Visual Studio Code

6 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-549812020 – < 2026.3.1Visual Studio Code Python Extension Security Feature Bypass VulnerabilityHIGH 7.80.5 %
CVE-2025-497142020 – < 2025.8.1Visual Studio Code Python Extension Remote Code Execution VulnerabilityHIGH 7.80.5 %
CVE-2024-490502020 – < 2024.18.2Visual Studio Code Python Extension Remote Code Execution VulnerabilityHIGH 8.81.3 %
CVE-2020-171632020 – < publicationVisual Studio Code Python Extension Remote Code Execution VulnerabilityHIGH 7.80.6 %
CVE-2020-169772020 – < publicationVisual Studio Code Python Extension Remote Code Execution VulnerabilityHIGH 7.83.4 %
CVE-2020-11712020 – < publicationVisual Studio Code Python Extension Remote Code Execution VulnerabilityHIGH 8.85.2 %