{"id":"CVE-2022-21991","title":"Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability","summary":"Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","vendor":"microsoft","product":"visual_studio_code","affected":["visual_studio_code"],"published":"2022-02-09","updated":"2026-10-08","sourceUpdated":"2026-10-08T22:17:16.293","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-21991","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21991","label":"secure@microsoft.com"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21991","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.02066,"epssPercentile":0.80804,"ingestedAt":"2026-10-08T23:16:47.330Z","slug":"CVE-2022-21991","body":"## Overview\n\nVisual Studio Code Remote Development Extension Remote Code Execution Vulnerability\n\n## Affected\n\n- `visual_studio_code`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":44.6,"likelihood":0.4,"exploitation":0,"ransomware":0},"changes":[]}