CVE-2024-49050

HIGH
Published Nov 12, 2024 Modified Jul 15, 2025 CWE-501

Description

Visual Studio Code Python Extension Remote Code Execution Vulnerability

CVSS v3.1 Score

8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-501 CWE-501

Affected Products

Vendor Product
microsoft python

References

Frequently Asked Questions

What is CVE-2024-49050? +
Visual Studio Code Python Extension Remote Code Execution Vulnerability It has a CVSS v3.1 base score of 8.8 (HIGH).
How severe is CVE-2024-49050? +
CVE-2024-49050 has a CVSS v3.1 score of 8.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-49050? +
CVE-2024-49050 affects products from microsoft, specifically: python. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-49050? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-48938 9.8

go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified …
CVE-2024-23682 8.2

Artemis Java Test Sandbox versions before 1.8.0 are vulnerable to a sandbox escape when an attacker includes class files in …
CVE-2025-49714 7.8

Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally.
CVE-2026-33828 7.8

Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally.
CVE-2024-3661 7.6

DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that …
CVE-2025-61884 7.5

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14. …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-49050 — free, no signup required.

Start Free Scan