The two important-severity flaws in Microsoft Windows Codecs Library and Visual Studio Code could enable remote code execution.
Source: Threadpost