CVE-2021-27084

HighCVSS 7.8

Published: 11/03/2021(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

61.36%

99th percentile - higher than 99% of all known CVEs

Summary

Remote code execution vulnerability in Visual Studio Code Java Extension Pack. Allows an attacker to execute code in the context of the user who opens a malicious Java project.

Risk Assessment

Risk includes takeover of the developer machine, data theft, and further attacks. Requires user interaction, e.g., opening a malicious project.

Recommendation

Update the Java Extension Pack to the latest version. Be cautious when opening projects from untrusted sources.

Original NVD description (English source)

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability