CVE-2019-0728

HIGH 7.8CVE-2019-0728 · Published 05/03/2019 · updated 17/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visual Studio Code Remote Code Execution Vulnerability'.

References

seclists.org/fulldisclosure/2019/Apr/38 · Mailing List
openwall.com/lists/oss-security/2019/04/30/4 · Mailing List
securityfocus.com/bid/106913 · Third Party Advisory
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0728 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free