CVE-2020-1481: Microsoft Eslint

High severity, CVSS 8.8. EPSS: 23.6% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project, aka 'Visual Studio Code ESLint Extention Remote Code Execution Vulnerability'.

Affected products

• Microsoft Eslint: before 2.1.7 (fixed in 2.1.7)

Published 2020-07-14. Last modified 2026-06-17.