CVE-2021-1639: Visual Studio Code Remote Code Execution Vulnerability
Published Feb 25, 2021
·Updated
Visual Studio Code Remote Code Execution Vulnerability
Affected Software
3 affected components
Microsoft Visual Studio 2017>=15.0<=15.9
Microsoft Visual Studio 2019>=16.0<=16.8
Microsoft Visual Studio Code
Remediation
Event History
Feb 25, 2021
CVE Published
11:01 PM
Data Sourced
11:01 PM
DescriptionSeverity
Data Sourced
via NVD·11:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2021-1639?
CVE-2021-1639 is a vulnerability in Visual Studio Code that allows remote code execution.
2
How severe is CVE-2021-1639?
CVE-2021-1639 has a severity rating of 7.8 out of 10.
3
Which versions of Visual Studio are affected by CVE-2021-1639?
CVE-2021-1639 affects Visual Studio 2017 (version 15.0 to 15.9) and Visual Studio 2019 (version 16.0 to 16.8).
4
How can I fix CVE-2021-1639?
To fix CVE-2021-1639, update your Visual Studio software to a version that is not affected by this vulnerability.
5
Where can I find more information about CVE-2021-1639?
More information about CVE-2021-1639 can be found at the following link: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1639