CVE-2021-26437
published 2021-09-15CVE-2021-26437: Visual Studio Code Spoofing Vulnerability Visual Studio Code Spoofing Vulnerability
low3.3CVSS 3.1
AVLACLPRNUIRSUCNILAN
EPSS
2.31%
82.4th percentile
Visual Studio Code Spoofing Vulnerability
Visual Studio Code Spoofing Vulnerability
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | visual_studio_code | >= 1.0.0 < 1.59.1 | 1.59.1 |
| msrc | visual_studio_code | — | — |
CVSS provenance
nvdv3.13.3LOWCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
cvelistv55.5MEDIUM
vendor_msrc5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
Visual Studio Code Spoofing Vulnerability
vendor_msrc·2021-09-14·CVSS 5.5
CVE-2021-26437 [MEDIUM] Visual Studio Code Spoofing Vulnerability
Visual Studio Code Spoofing Vulnerability
Visual Studio: Visual Studio
Microsoft: Microsoft
Impact: Spoofing
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Remediation: Release Notes
Reference: https://code.visualstudio.com/Download
VulDB
Microsoft Visual Studio Code Remote Code Execution
vuldb·2026-08-11·CVSS 3.3
CVE-2021-26437 [LOW] Microsoft Visual Studio Code Remote Code Execution
A vulnerability was found in Microsoft Visual Studio Code. It has been rated as critical. Affected by this issue is some unknown functionality. This manipulation causes Remote Code Execution.
This vulnerability appears as CVE-2021-26437. The attack may be initiated remotely. There is no available exploit.
It is recommended to apply a patch to fix this issue.
CVEList
Visual Studio Code Spoofing Vulnerability
cvelistv5·2021-09-15·CVSS 5.5
CVE-2021-26437 [MEDIUM] Visual Studio Code Spoofing Vulnerability
Visual Studio Code Spoofing Vulnerability
Visual Studio Code Spoofing Vulnerability
No detection rules found.
No public exploits indexed.
2021-09-15
Published