Visual Studio Code Security Vulnerabilities and Issues — Page 2 of Visual Studio Code CVE List

cve

CVE-2021-31211

Visual Studio Code Remote Code Execution...

7.8CVSS

7.9AI Score

0.104EPSS

2021-05-11 07:15 PM

89

9

cve

CVE-2021-31213

Visual Studio Code Remote Containers Extension Remote Code Execution...

7.8CVSS

8AI Score

0.104EPSS

2021-05-11 07:15 PM

56

9

cve

CVE-2021-31214

Visual Studio Code Remote Code Execution...

7.8CVSS

7.9AI Score

0.104EPSS

2021-05-11 07:15 PM

77

4

cve

CVE-2021-27068

Visual Studio Remote Code Execution...

8.8CVSS

8.9AI Score

0.013EPSS

2021-05-11 07:15 PM

89

4

cve

CVE-2021-28469

Visual Studio Code Remote Code Execution...

7.8CVSS

7.2AI Score

0.277EPSS

2021-04-13 08:15 PM

91

9

cve

CVE-2021-28473

Visual Studio Code Remote Code Execution...

7.8CVSS

7.2AI Score

0.277EPSS

2021-04-13 08:15 PM

64

7

cve

CVE-2021-28471

Remote Development Extension for Visual Studio Code Remote Code Execution...

7.8CVSS

7.8AI Score

0.277EPSS

2021-04-13 08:15 PM

50

4

cve

CVE-2021-28475

Visual Studio Code Remote Code Execution...

7.8CVSS

7.2AI Score

0.277EPSS

2021-04-13 08:15 PM

75

7

cve

CVE-2021-28448

Visual Studio Code Kubernetes Tools Remote Code Execution...

7.8CVSS

7.8AI Score

0.277EPSS

2021-04-13 08:15 PM

51

4

cve

CVE-2021-28477

Visual Studio Code Remote Code Execution...

7CVSS

7.6AI Score

0.127EPSS

2021-04-13 08:15 PM

53

7

cve

CVE-2021-28457

Visual Studio Code Remote Code Execution...

7.8CVSS

7.2AI Score

0.277EPSS

2021-04-13 08:15 PM

59

9

cve

CVE-2021-28472

Visual Studio Code Maven for Java Extension Remote Code Execution...

7.8CVSS

7.8AI Score

0.277EPSS

2021-04-13 08:15 PM

61

4

cve

CVE-2021-28470

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution...

7.8CVSS

7.9AI Score

0.277EPSS

2021-04-13 08:15 PM

64

4

cve

CVE-2021-27084

Visual Studio Code Java Extension Pack Remote Code Execution...

7.8CVSS

7.8AI Score

0.154EPSS

2021-03-11 04:15 PM

43

cve

CVE-2021-27081

Visual Studio Code ESLint Extension Remote Code Execution...

7.8CVSS

7.8AI Score

0.154EPSS

2021-03-11 04:15 PM

50

cve

CVE-2021-27083

Remote Development Extension for Visual Studio Code Remote Code Execution...

7.8CVSS

7.8AI Score

0.154EPSS

2021-03-11 04:15 PM

50

cve

CVE-2021-27060

Visual Studio Code Remote Code Execution...

7.8CVSS

7.8AI Score

0.154EPSS

2021-03-11 04:15 PM

56

cve

CVE-2021-27082

Quantum Development Kit for Visual Studio Code Remote Code Execution...

7.8CVSS

7.8AI Score

0.154EPSS

2021-03-11 04:15 PM

54

cve

CVE-2021-1639

Visual Studio Code Remote Code Execution...

7CVSS

7.9AI Score

0.024EPSS

2021-02-25 11:15 PM

80

2

cve

CVE-2021-26700

Visual Studio Code npm-script Extension Remote Code Execution...

7.8CVSS

7.8AI Score

0.079EPSS

2021-02-25 11:15 PM

57

2

cve

CVE-2020-17156

Visual Studio Remote Code Execution...

7.8CVSS

8.2AI Score

0.011EPSS

2020-12-10 12:15 AM

95

3

cve

CVE-2020-17159

Visual Studio Code Java Extension Pack Remote Code Execution...

7.8CVSS

8.2AI Score

0.011EPSS

2020-12-10 12:15 AM

66

cve

CVE-2020-17150

Visual Studio Code Remote Code Execution...

7.8CVSS

8.2AI Score

0.011EPSS

2020-12-10 12:15 AM

85

3

cve

CVE-2020-17148

Visual Studio Code Remote Development Extension Remote Code Execution...

7.8CVSS

8.2AI Score

0.011EPSS

2020-12-10 12:15 AM

94

2

cve

CVE-2020-17104

Visual Studio Code JSHint Extension Remote Code Execution...

7.8CVSS

7.8AI Score

0.013EPSS

2020-11-11 07:15 AM

60

cve

CVE-2020-16977

A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads a Jupyter notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative...

7CVSS

7.9AI Score

0.007EPSS

2020-10-16 11:15 PM

107

cve

CVE-2020-17023

A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

7.8CVSS

7.9AI Score

0.011EPSS

2020-10-16 11:15 PM

76

cve

CVE-2020-16874

A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an...

7.8CVSS

7.8AI Score

0.012EPSS

2020-09-11 05:15 PM

69

cve

CVE-2020-16856

A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an...

7.8CVSS

7.9AI Score

0.012EPSS

2020-09-11 05:15 PM

79

4

cve

CVE-2020-16881

A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

7.8CVSS

8.1AI Score

0.011EPSS

2020-09-11 05:15 PM

906

cve

CVE-2020-0604

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

7.8CVSS

8.3AI Score

0.003EPSS

2020-08-17 07:15 PM

67

cve

CVE-2020-1481

A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project, aka 'Visual Studio Code ESLint Extention Remote Code Execution...

8.8CVSS

9.1AI Score

0.038EPSS

2020-07-14 11:15 PM

67

2

cve

CVE-2020-1416

An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege...

8.8CVSS

8.8AI Score

0.006EPSS

2020-07-14 11:15 PM

180

4

cve

CVE-2020-1147

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution...

7.8CVSS

8AI Score

0.856EPSS

2020-07-14 11:15 PM

1139

In Wild

2

cve

CVE-2020-1343

An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plain text, aka 'Visual Studio Code Live Share Information Disclosure...

5.9CVSS

6.2AI Score

0.003EPSS

2020-06-09 08:15 PM

54

cve

CVE-2020-1192

A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from...

7.8CVSS

8.5AI Score

0.011EPSS

2020-05-21 11:15 PM

66

cve

CVE-2020-1171

A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from...

8.8CVSS

8.1AI Score

0.038EPSS

2020-05-21 11:15 PM

62

cve

CVE-2019-1350

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1352, CVE-2019-1354,...

8.8CVSS

9.2AI Score

0.064EPSS

2020-01-24 09:15 PM

167

cve

CVE-2019-1349

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1350, CVE-2019-1352, CVE-2019-1354,...

8.8CVSS

9.2AI Score

0.064EPSS

2020-01-24 09:15 PM

194

cve

CVE-2019-1354

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1352,...

8.8CVSS

9.2AI Score

0.056EPSS

2020-01-24 09:15 PM

176

cve

CVE-2019-1414

An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to users of a local computer, aka 'Visual Studio Code Elevation of Privilege...

7.8CVSS

7.6AI Score

0.0004EPSS

2020-01-24 09:15 PM

2467

cve

CVE-2019-1352

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1354,...

8.8CVSS

9.2AI Score

0.064EPSS

2020-01-24 09:15 PM

196

cve

CVE-2019-0809

A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link library (DLL) files, aka 'Visual Studio Remote Code Execution...

7.8CVSS

8AI Score

0.02EPSS

2019-04-09 03:29 AM

52

cve

CVE-2019-0728

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visual Studio Code Remote Code Execution...

7.8CVSS

8.1AI Score

0.042EPSS

2019-03-05 11:29 PM

54

cve

CVE-2019-0613

A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework and...

8.8CVSS

8.8AI Score

0.028EPSS

2019-03-05 11:29 PM

86

cve

CVE-2019-0546

A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ constructs, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual...

7.8CVSS

7.9AI Score

0.015EPSS

2019-01-08 09:29 PM

46

cve

CVE-2018-8232

A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code, aka "Microsoft Macro Assembler Tampering Vulnerability." This affects Microsoft Visual...

7.8CVSS

8.1AI Score

0.001EPSS

2018-07-11 12:29 AM

47

cve

CVE-2018-8172

A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend...

7.8CVSS

7.9AI Score

0.103EPSS

2018-07-11 12:29 AM

71

2

cve

CVE-2018-0597

Untrusted search path vulnerability in the installer of Visual Studio Code allows an attacker to gain privileges via a Trojan horse DLL in an unspecified...

7.8CVSS

7.7AI Score

0.187EPSS

2018-06-26 02:29 PM

27