CVE-2019-0728
No fix known EPSS 28%
A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visual Studio Code Remote Code Execution Vulnerability'.
Products: Microsoft Visual Studio Code