CVE-2023-36742 - Visual Studio Code Remote Code Execution Vulnerability

HIGH

Visual Studio Code Remote Code Execution Vulnerability

Published Sep 12, 2023

7.8

HIGH

CVSS 3.1

EPSS 1.00%

Visual Studio Code Remote Code Execution Vulnerability

Vendor Microsoft Product Visual Studio Code Default
unknown
Affected
- ≥ 1.0.0, < 1.82.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Visual Studio Code	unknown	Affected ≥ 1.0.0, < 1.82.1

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-40685		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36742		vendor-advisoryPatchVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Sep 12, 2023

Updated Oct 30, 2025

Reserved Jun 26, 2023

CISA Vulnrichment

Updated Sep 11, 2024

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Sep 12, 2023

Updated Oct 30, 2025

GitHub

No data