CVE-2021-28953: C/c++ Advanced Lint Project C/c++ Advanced Lint

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

The unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted repository.

Affected products

• C/c++ Advanced Lint Project C/c++ Advanced Lint: before 1.9.0 (fixed in 1.9.0)

Published 2021-03-21. Last modified 2026-06-17.