CVE-2021-43907: Microsoft Windows Subsystem For Linux

Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days.

Visual Studio Code WSL Extension Remote Code Execution Vulnerability

Affected products

• Microsoft Windows Subsystem For Linux: before 0.63.11 (fixed in 0.63.11)

Published 2021-12-15. Last modified 2026-06-17.