12509 matches found
CVE-2025-65717
The Visual Studio Code Live Server extension (v5.7.9) is vulnerable to file exfiltration due to a lack of protective measures for website structures. The root cause allows a malicious actor to use a specially crafted HTML page to trigger user interaction, enabling the exfiltration of protected fi...
PT-2026-8356
Name of the Vulnerable Software and Affected Versions Visual Studio Code Live Server version 5.7.9 Description An issue in Visual Studio Code Live Server allows attackers to exfiltrate files through user interaction with a specially crafted HTML page. Recommendations At the moment, there is no...
CVE-2025-65717
An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...
CVE-2025-65716
An issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to execute arbitrary code via uploading a crafted .Md file...
CVE-2025-65716
An issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to execute arbitrary code via uploading a crafted .Md file...
CVE-2025-65716
The Visual Studio Code Extensions Markdown Preview Enhanced version v0.8.18 is vulnerable to arbitrary code execution due to improper handling of code generation . An attacker can trigger this vulnerability by uploading or processing a specially crafted .Md file. The flaw is specifically linked t...
CVE-2025-65717
An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...
CVE-2025-65717: Improper Neutralization of Input During Web Page Generation
An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...
CVE-2025-65715
An issue in the code-runner.executorMap setting of Visual Studio Code Extensions Code Runner v0.12.2 allows attackers to execute arbitrary code when opening a crafted workspace...
Microsoft Visual Studio Privilege Escalation
The vulnerability of the Microsoft Visual Studio software lies in the lack of measures taken to clean up data at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Microsoft Visual Studio Code Source Editor Data Cleaning
The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of measures taken to clean up data at the control level. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions remotely...
Microsoft Visual Studio Code Execution
The vulnerability of the Microsoft Visual Studio software lies in the insufficient control over code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Microsoft Visual Studio Code Editor Race Situation Code Execution
The vulnerability of Microsoft Visual Studio Code’s editor is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Security Updates for Microsoft Visual Studio Products (February 2026)
The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio allows an unauthorized attacker to execu...
Top 10 actions to build agents securely with Microsoft Copilot Studio
Organizations are rapidly adopting Copilot Studio agents, but threat actors are equally fast at exploiting misconfigured AI workflows. Mis-sharing, unsafe orchestration, and weak authentication create new identity and data‑access paths that traditional controls don’t monitor. As AI agents become...
Secret Net Studio Shadow Copying Manipulation
The vulnerability of the shadow copying subsystem of the Secret Net Studio protection tool is related to deficiencies in resource blocking mechanisms. Exploiting this vulnerability could allow attackers to influence the screen locking process...
Security Update for Microsoft Visual Studio Code (February 2026)
The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.109.2. It is, therefore, affected by multiple vulnerabilities: - Time-of-check time-of-use toctou race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a...
CVE-2026-21518
Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...