NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2021-43891

CVSS 3.1: 7.8 high
EPSS: 13%p96
Published: Dec 15, 2021 · Dec 15, 2021
Modified: Oct 8, 2026

Analyze CVE-2021-43891 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Visual Studio Code Remote Code Execution Vulnerability

Vendors: microsoft

Products: visual studio code

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (13.1%)

In the news

2 stories

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Malicious .git core.fsmonitor configs let attacker code run in AI coding agents like Claude Code and Codex; four of eight flaws remain unpatched.

The Hacker NewsSep 2, 14:06 UTC · Sep 2, 2026VulnerabilityCVE-2026-19592 CVE-2026-72718 CVE-2026-71963+37 · 3 reads

68

Microsoft December 2021 Patch Tuesday fixes an actively exploited zero

Security AffairsDec 15, 15:08 UTC · Dec 15, 2021VulnerabilityExploitedCVE-2021-43890 CVE-2021-43240 CVE-2021-41333+541 · 1 read

60