CVE-2020-1192

A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would need to convince a target to open a specially crafted file in Visual Studio Code with the Python extension installed. The update address the vulnerability by modifying the way Visual Studio Code Python extension enforces user settings.

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1192
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1192Patch, Vendor Advisory

Published

May 21, 2020

Last Modified

Aug 19, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11914The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bou…4.3
• CVE-2020-11915An issue was discovered in Svakom Siime Eye 14.1.00000001.3.…6.8
• CVE-2020-11916An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0…6.3
• CVE-2020-11917An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0…4.3
• CVE-2020-11918An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0…5.4
• CVE-2020-11919An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0…8
• CVE-2020-11920An issue was discovered in Svakom Siime Eye 14.1.00000001.3.…9.8
• CVE-2020-11921An issue was discovered in Lush 2 through 2020-02-25. Due to…8.8
• CVE-2020-11922An issue was discovered in WiZ Colors A60 1.14.0. The device…4.3
• CVE-2020-11923An issue was discovered in WiZ Colors A60 1.14.0. API creden…5.5
• CVE-2020-11924An issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi cred…5.5
• CVE-2020-11925An issue was discovered in Luvion Grand Elite 3 Connect thro…8.8