Advisories · Technology

Microsoft Visual Studio Code.

Every CVE that names Microsoft Visual Studio Code among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-102851 CVE record

CVSS 6.1 Medium

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- Privilege escalation
Not analysed yet 13 Oct 2026
CVE-2026-69370 CVE record

CVSS 8.8 High

Visual Studio Code Remote Code Execution Vulnerability
- Microsoft Visual Studio Code
- Command injection
Not analysed yet 13 Oct 2026
CVE-2026-70098 CVE record

CVSS 8.8 High

Visual Studio Code Remote Code Execution Vulnerability
- Microsoft Visual Studio Code
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-102238 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Visual Studio Code Remote Code Execution Vulnerability
- Microsoft Visual Studio Code
- Path traversal
Not analysed yet 13 Oct 2026
CVE-2026-102235 CVE record

CVSS 8.8 High

Visual Studio Code Remote Code Execution Vulnerability
- Microsoft Visual Studio Code
- CWE-116
Not analysed yet 13 Oct 2026
CVE-2026-102234 CVE record

CVSS 7.4 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- CWE-807
Not analysed yet 13 Oct 2026
CVE-2026-102233 CVE record

CVSS 7.8 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-102232 CVE record

CVSS 7.0 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-102231 CVE record

CVSS 7.7 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- CWE-41
Not analysed yet 13 Oct 2026
CVE-2026-102229 CVE record

CVSS 6.8 Medium

Visual Studio Code Information Disclosure Vulnerability
- Microsoft Visual Studio Code
- Path traversal
Not analysed yet 13 Oct 2026
CVE-2026-81383 CVE record

CVSS 7.4 High

Visual Studio Code Information Disclosure Vulnerability
- Microsoft Visual Studio Code
- CWE-706
Not analysed yet 8 Sept 2026
CVE-2026-78462 CVE record

CVSS 8.8 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- Broken access control
Not analysed yet 8 Sept 2026
CVE-2026-81381 CVE record

CVSS 6.5 Medium

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
- Microsoft Visual Studio Code
- Hard-coded credentials
Not analysed yet 8 Sept 2026
CVE-2026-81380 CVE record

CVSS 5.3 Medium

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
- Microsoft Visual Studio Code
- Command injection
Not analysed yet 8 Sept 2026
CVE-2026-81379 CVE record

CVSS 8.2 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- CWE-636
Not analysed yet 8 Sept 2026
CVE-2026-81378 CVE record

CVSS 8.2 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- CWE-436
Not analysed yet 8 Sept 2026
CVE-2026-81377 CVE record

CVSS 6.5 Medium

Visual Studio Code Tampering Vulnerability
- Microsoft Visual Studio Code
- Path traversal
Not analysed yet 8 Sept 2026
CVE-2026-81376 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- CWE-693
- CWE-1023
Not analysed yet 8 Sept 2026
CVE-2026-81357 CVE record

CVSS 8.2 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- Server-side request forgery (SSRF)
Not analysed yet 8 Sept 2026
CVE-2026-81356 CVE record

CVSS 8.2 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- HTTP request smuggling
Not analysed yet 8 Sept 2026
CVE-2026-78461 CVE record

CVSS 7.4 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- Path traversal
Not analysed yet 8 Sept 2026
CVE-2026-70334 CVE record

CVSS 7.8 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- CWE-184
Not analysed yet 8 Sept 2026
CVE-2026-70336 CVE record

CVSS 8.8 High

Visual Studio Code Remote Code Execution Vulnerability
- Microsoft Visual Studio Code
- Code injection
Not analysed yet 11 Aug 2026
CVE-2026-70335 CVE record

CVSS 7.8 High

GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
- Microsoft Visual Studio Code
- Command injection
Not analysed yet 11 Aug 2026
CVE-2026-69306 CVE record

CVSS 8.2 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- CWE-636
Not analysed yet 11 Aug 2026
CVE-2026-69278 CVE record

CVSS 7.8 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- Broken access control
- CWE-693
Not analysed yet 11 Aug 2026
CVE-2026-69320 CVE record

CVSS 8.8 High

Visual Studio Code Remote Code Execution Vulnerability
- Microsoft Visual Studio Code
- Command injection
Not analysed yet 11 Aug 2026
CVE-2026-47285 CVE record

CVSS 6.5 Medium

Visual Studio Code Information Disclosure Vulnerability
- Microsoft Visual Studio Code
- Command injection
Not analysed yet 11 Aug 2026
CVE-2026-59113 CVE record

CVSS 8.8 High

Visual Studio Code Remote Code Execution Vulnerability
- Microsoft Visual Studio Code
- Broken access control
Not analysed yet 11 Aug 2026
CVE-2026-58650 CVE record

CVSS 7.8 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- Broken access control
Not analysed yet 11 Aug 2026
CVE-2026-57102 CVE record

CVSS 8.8 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- Information disclosure
- CWE-829
Not analysed yet 14 Jul 2026
CVE-2026-57101 CVE record

CVSS 7.1 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- Cross-site scripting (XSS)
Not analysed yet 14 Jul 2026
CVE-2026-50520 CVE record

CVSS 8.4 High

Visual Studio Code Remote Code Execution Vulnerability
- Microsoft Visual Studio Code
- Command injection
Not analysed yet 14 Jul 2026
CVE-2026-45496 CVE record

CVSS 5.5 Medium

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- Path traversal
Not analysed yet 14 Jul 2026
CVE-2026-47282 CVE record

CVSS 6.5 Medium

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
- Microsoft Visual Studio Code
- Information disclosure
- Hard-coded credentials
Not analysed yet 14 Jul 2026
CVE-2026-48569 CVE record

CVSS 7.1 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- Path traversal
- CWE-20
Not analysed yet 9 Jun 2026
CVE-2026-47284 CVE record

CVSS 6.5 Medium

Visual Studio Code Information Disclosure Vulnerability
- Microsoft Visual Studio Code
- Information disclosure
Not analysed yet 9 Jun 2026
CVE-2026-47281 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Visual Studio Code Elevation of Privilege Vulnerability
- Microsoft Visual Studio Code
- Authentication bypass
- Hard-coded credentials
Not analysed yet 9 Jun 2026
CVE-2026-40376 CVE record

CVSS 7.5 High

Visual Studio Code Elevation of Privilege Vulnerability
- Microsoft Visual Studio Code
- CWE-20
Not analysed yet 9 Jun 2026
CVE-2026-47287 CVE record

CVSS 6.5 Medium

Visual Studio Code Tampering Vulnerability
- Microsoft Visual Studio Code
- Path traversal
Not analysed yet 9 Jun 2026
CVE-2026-41613 CVE record

CVSS 8.8 High

Visual Studio Code Elevation of Privilege Vulnerability
- Microsoft Visual Studio Code
- Command injection
- Authentication bypass
Not analysed yet 12 May 2026
CVE-2026-41611 CVE record

CVSS 7.8 High

Visual Studio Code Remote Code Execution Vulnerability
- Microsoft Visual Studio Code
- Command injection
- Cross-site scripting (XSS)
Not analysed yet 12 May 2026
CVE-2026-41610 CVE record

CVSS 6.3 Medium

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- Path traversal
- Cross-site scripting (XSS)
Not analysed yet 12 May 2026
CVE-2026-41109 CVE record

CVSS 8.8 High

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- Other injection
Not analysed yet 12 May 2026
CVE-2026-21523 CVE record

CVSS 8.0 High

GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
- Microsoft Visual Studio Code CoPilot Chat Extension
- Microsoft Visual Studio Code
- Race condition
Not analysed yet 10 Feb 2026
CVE-2026-21518 CVE record

CVSS 8.8 High

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code CoPilot Chat Extension
- Microsoft Visual Studio Code
- Command injection
Not analysed yet 10 Feb 2026
CVE-2025-64660 CVE record

CVSS 8.0 High

GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
- Microsoft Visual Studio Code
- Broken access control
Not analysed yet 20 Nov 2025
CVE-2025-62453 CVE record

CVSS 5.0 Medium

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- CWE-693
- CWE-1426
Not analysed yet 11 Nov 2025
CVE-2025-55319 CVE record

CVSS 8.8 High

Agentic AI and Visual Studio Code Remote Code Execution Vulnerability
- Microsoft Visual Studio Code
- Command injection
Not analysed yet 12 Sept 2025
CVE-2025-21264 CVE record

CVSS 7.1 High

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code CoPilot Chat Extension
- Microsoft Visual Studio Code
- Information disclosure
Not analysed yet 13 May 2025
CVE-2025-32726 CVE record

CVSS 6.8 Medium

Visual Studio Code Elevation of Privilege Vulnerability
- Microsoft Visual Studio Code
- Broken access control
Not analysed yet 12 Apr 2025
CVE-2025-26631 CVE record

CVSS 7.3 High

Visual Studio Code Elevation of Privilege Vulnerability
- Microsoft Visual Studio Code
- CWE-427
Not analysed yet 11 Mar 2025
CVE-2025-24039 CVE record

CVSS 7.3 High

Visual Studio Code Elevation of Privilege Vulnerability
- Microsoft Visual Studio Code
- CWE-427
Not analysed yet 11 Feb 2025
CVE-2024-43488 CVE record

CVSS 8.8 High

Visual Studio Code extension for Arduino Remote Code Execution Vulnerability
- Microsoft Visual Studio Code
- Authentication bypass
Not analysed yet 8 Oct 2024
CVE-2024-26165 CVE record

CVSS 8.8 High

Visual Studio Code Elevation of Privilege Vulnerability
- Microsoft Visual Studio Code
- CWE-256
Not analysed yet 12 Mar 2024
CVE-2023-36742 CVE record

CVSS 7.8 High

Visual Studio Code Remote Code Execution Vulnerability
- Microsoft Visual Studio Code
Not analysed yet 12 Sept 2023
CVE-2023-33144 CVE record

CVSS 6.6 Medium

Visual Studio Code Spoofing Vulnerability
- Microsoft Visual Studio Code
- Path traversal
Not analysed yet 13 Jun 2023
CVE-2023-29338 CVE record

CVSS 6.6 Medium

Visual Studio Code Spoofing Vulnerability
- Microsoft Visual Studio Code
- Broken access control
Not analysed yet 9 May 2023
CVE-2023-24893 CVE record

CVSS 7.8 High

Visual Studio Code Remote Code Execution Vulnerability
- Microsoft Visual Studio Code
- CWE-20
Not analysed yet 11 Apr 2023
CVE-2023-21779 CVE record

CVSS 7.8 High

Visual Studio Code Remote Code Execution Vulnerability
- Microsoft Visual Studio Code
- Insecure deserialization
Not analysed yet 10 Jan 2023