GCVE - cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:python:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:python:*:*

part: a version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Visual Studio Code (`6500549c-c958-5fc8-9366-44e64d367c0f`)
Edition	*
Language	*
Software edition	*
Target software	python
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/microsoft/vscode`	purl2cpe	2026-06-01 10:17:05.885687
`pkg:nuget/rb.vscode`	purl2cpe	2026-06-01 10:17:05.885689
`pkg:rpm/opensuse/microsoft-vscode`	purl2cpe	2026-06-01 10:17:05.885690

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-49714`	vulnerable	2026-06-08 07:29:14.555069	Visual Studio Code Python Extension Remote Code Execution Vulnerability HIGH (7.8) Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally. Published: 2025-07-08T16:58:08.064Z Updated: 2026-02-26T17:51:08.151Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49714	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-49050`	vulnerable	2026-06-08 06:50:12.228747	Visual Studio Code Python Extension Remote Code Execution Vulnerability HIGH (8.8) Visual Studio Code Python Extension Remote Code Execution Vulnerability Published: 2024-11-12T17:54:26.264Z Updated: 2025-07-08T15:41:59.382Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49050	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-1192`	vulnerable	2026-06-08 05:20:58.724844	Details available A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1171. Published: 2020-05-21T22:53:37.000Z Updated: 2024-08-04T06:25:01.302Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1192	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-1171`	vulnerable	2026-06-08 05:20:58.669478	Details available A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1192. Published: 2020-05-21T22:53:30.000Z Updated: 2024-08-04T06:25:01.296Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1171	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-17163`	vulnerable	2026-06-08 05:20:56.299851	Visual Studio Code Python Extension Remote Code Execution Vulnerability HIGH (7.8) Visual Studio Code Python Extension Remote Code Execution Vulnerability Published: 2023-12-29T16:24:16.265Z Updated: 2025-09-05T17:11:25.294Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17163	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-16977`	vulnerable	2026-06-08 05:20:55.128686	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.