PT-2026-51103

Summary A Stored Cross-Site Scripting XSS issue previously existed in the Text Widget in Board of Outerbase Studio where unsanitized HTML could be rendered using dangerouslySetInnerHTML Steps to Reproduce 1. Create a new dashboard. 2. Add a Text widget. 3. Insert the following payload: html...

EUVD-2026-37343

Vulnerability in the MySQL Shell product of Oracle MySQL component: Shell for VS Code. The supported version that is affected is 2026.2.0+9.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MySQL Shell. While the vulnerability is in...

CVE-2026-46871

Vulnerability in the MySQL Shell product of Oracle MySQL component: Shell for VS Code. The supported version that is affected is 2026.2.0+9.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Shell. Successful attacks...

CVE-2026-46850

Vulnerability in the MySQL Shell product of Oracle MySQL component: Shell for VS Code. The supported version that is affected is 2026.2.0+9.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MySQL Shell. While the vulnerability is in...

The vulnerability of Visual Studio Code’s source editor, related to insufficient input validation, allows attackers to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of Microsoft Visual Studio Code’s editor, related to insufficient protection of service data, allows attackers to disclose protected information.

The vulnerability of Microsoft Visual Studio Code’s editor is related to insufficient protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the MSSQL Extension, a database editor in Visual Studio Code, allows an attacker to escalate their privileges or execute arbitrary code.

The vulnerability of the MSSQL Extension, a database editor in Visual Studio Code, lies in the inclusion of functionality from an unreliable source. Exploiting this vulnerability can allow attackers to enhance their privileges or execute arbitrary code...

The vulnerability of Microsoft Visual Studio Code’s source editor lies in the incorrect path name limitation for the directory, allowing attackers to bypass existing security restrictions.

The vulnerability of Microsoft Visual Studio Code’s editor is related to incorrect path name restrictions for the directory. Exploiting this vulnerability could allow an attacker to bypass existing security restrictions...

The vulnerability of Microsoft Visual Studio Code’s editor, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of Microsoft Visual Studio Code’s editor is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Security Update for Microsoft Visual Studio Code (June 2026)

The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.123.2. It is, therefore, affected by multiple vulnerabilities: - Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. CVE-2026-47281 -...

CVE-2026-46871

Vulnerability in the MySQL Shell product of Oracle MySQL component: Shell for VS Code. The supported version that is affected is 2026.2.0+9.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Shell. Successful attacks...

CVE-2026-46870

Vulnerability in the MySQL Shell product of Oracle MySQL component: Shell for VS Code. The supported version that is affected is 2026.2.0+9.6.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Shell. While the...

CVE-2026-46850

Vulnerability in the MySQL Shell product of Oracle MySQL component: Shell for VS Code. The supported version that is affected is 2026.2.0+9.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MySQL Shell. While the vulnerability is in...

Aembit Extends IAM for Agentic AI to Microsoft Copilot Studio

Las Vegas, USA / Nevada, 16th June 2026, CyberNewswire...

KLA91273 SB vulnerability in Microsoft Developer Tools

Security bypass vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2026-34182 Exploitation Related products Microsoft-Visual-Studio CVE list CVE-2026-34182 unknown Solution Install necessary...

PT-2026-49978

Name of the Vulnerable Software and Affected Versions MySQL Shell Shell for VS Code version 2026.2.0+9.6.1 Description An issue in the Shell for VS Code component of MySQL Shell allows a low-privileged attacker with network access via multiple protocols to compromise the software. Although the fl...

PT-2026-49979

Name of the Vulnerable Software and Affected Versions MySQL Shell Shell for VS Code version 2026.2.0+9.6.1 Description A flaw in the Shell for VS Code component of Oracle MySQL allows a low-privileged attacker with network access via multiple protocols to compromise the system. Successful...

PT-2026-49958

Name of the Vulnerable Software and Affected Versions MySQL Shell Shell for VS Code version 2026.2.0+9.6.1 Description An issue in the Shell for VS Code component of MySQL Shell allows a low-privileged attacker with network access via HTTP to compromise the software. Successful exploitation can...

PT-2026-68364

Name of the Vulnerable Software and Affected Versions Markdown Preview Enhanced versions prior to 0.8.28 Description Improper neutralization of special elements in the preview-link handling of the Markdown Preview Enhanced extension for Visual Studio Code allows remote code execution. When a user...

The vulnerability of Microsoft Visual Studio Code’s editor, related to errors in processing relative path handling for directories, allows attackers to gain read and modify access to data.

The vulnerability of Microsoft Visual Studio Code’s editor is related to errors in handling relative pathnames to directories. Exploiting this vulnerability can allow an attacker to gain read and modify access to data remotely...