CVE Catalog
CVE-2021-27083
HighCVSS 7.8Exploitation Probability (EPSS)
Very high risk63.45%
99th percentile - higher than 99% of all known CVEs
Summary
Remote code execution vulnerability in Remote Development extension for Visual Studio Code. Allows an attacker to execute code in the context of the user who opens a malicious project.
Risk Assessment
Risk includes takeover of the developer machine, data theft, and further attacks. Requires user interaction, e.g., opening a malicious repository.
Recommendation
Update the Remote Development extension to the latest version. Be cautious when opening projects from untrusted sources.
Original NVD description (English source)
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability