Visual Studio Code
by Microsoft
Source repositories
CVEs (85)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-43891 | Hig | 0.52 | 7.8 | 0.13 | Dec 15, 2021 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2020-1192 | Hig | 0.52 | 7.8 | 0.04 | May 21, 2020 | A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user… | ||
| CVE-2026-70335 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally. | ||
| CVE-2026-69278 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | ||
| CVE-2026-58650 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | ||
| CVE-2026-44189 | Hig | 0.51 | 7.8 | 0.01 | Jul 22, 2026 | A flaw was found in the Visual Studio Code Ansible Lightspeed extension's AnsiblePlaybookRunProvider. This command injection vulnerability allows an attacker to craft a malicious playbook filename containing special characters. When a victim runs the playbook, these characters… | ||
| CVE-2026-47292 | Hig | 0.51 | 7.8 | 0.00 | Jun 9, 2026 | Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally. | ||
| CVE-2026-41611 | Hig | 0.51 | 7.8 | 0.00 | May 12, 2026 | Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally. | ||
| CVE-2024-43601 | Hig | 0.51 | 7.8 | 0.01 | Oct 8, 2024 | Visual Studio Code for Linux Remote Code Execution Vulnerability | ||
| CVE-2023-36742 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2023-24893 | Hig | 0.51 | 7.8 | 0.01 | Apr 11, 2023 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2023-21779 | Hig | 0.51 | 7.8 | 0.02 | Jan 10, 2023 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2022-41083 | Hig | 0.51 | 7.8 | 0.01 | Oct 11, 2022 | Visual Studio Code Elevation of Privilege Vulnerability | ||
| CVE-2021-42322 | Hig | 0.51 | 7.8 | 0.01 | Nov 10, 2021 | Visual Studio Code Elevation of Privilege Vulnerability | ||
| CVE-2021-34529 | Hig | 0.51 | 7.8 | 0.05 | Jul 14, 2021 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2021-34528 | Hig | 0.51 | 7.8 | 0.03 | Jul 14, 2021 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2021-34479 | Hig | 0.51 | 7.8 | 0.03 | Jul 14, 2021 | Microsoft Visual Studio Spoofing Vulnerability | ||
| CVE-2021-31214 | Hig | 0.51 | 7.8 | 0.03 | May 11, 2021 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2021-31211 | Hig | 0.51 | 7.8 | 0.03 | May 11, 2021 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2021-28475 | Hig | 0.51 | 7.8 | 0.03 | Apr 13, 2021 | Visual Studio Code Remote Code Execution Vulnerability |
- risk 0.52cvss 7.8epss 0.13
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.52cvss 7.8epss 0.04
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user…
- risk 0.51cvss 7.8epss 0.00
Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
- risk 0.51cvss 7.8epss 0.00
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
- risk 0.51cvss 7.8epss 0.01
A flaw was found in the Visual Studio Code Ansible Lightspeed extension's AnsiblePlaybookRunProvider. This command injection vulnerability allows an attacker to craft a malicious playbook filename containing special characters. When a victim runs the playbook, these characters…
- risk 0.51cvss 7.8epss 0.00
Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.01
Visual Studio Code for Linux Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Visual Studio Code Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Visual Studio Code Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.05
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Visual Studio Spoofing Vulnerability
- risk 0.51cvss 7.8epss 0.03
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Visual Studio Code Remote Code Execution Vulnerability
Page 2 of 5