CVE-2026-47285

CVE-2026-47285 describes an information-disclosure vulnerability in Visual Studio Code due to improper neutralization of special elements used in a command (command injection). The NVD entry and CVE records state that an unauthorized attacker could disclose information over a network. The CVSS 3....

CVE-2026-59113

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability

...

EUVD-2026-56304

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2026-59113

CVE-2026-59113 concerns Visual Studio Code. The vulnerability is described as missing authorization that allows an unauthorized attacker to execute code over a network. The NVD entry cites a CVSS v3.1 base score of 8.8 (High) with network attack vector, no privileges required, user interaction re...

CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability

...

CVE-2026-58650

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability

...

EUVD-2026-56289

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-58650

CVE-2026-58650 describes an authorization bypass in Visual Studio Code triggered by a user-controlled key, enabling a local attacker to bypass a security feature. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with Local attack vector, Low attack complexity, and no privileges required, ...

CoPilot Chat Security Feature Bypass Vulnerability

No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network...

GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...

Visual Studio Code Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

Visual Studio Code Remote Code Execution Vulnerability

Improper neutralization of special elements used in an os command 'os command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

Visual Studio Code Security Feature Bypass Vulnerability

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

Visual Studio Code Security Feature Bypass Vulnerability

Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

Visual Studio Code Remote Code Execution Vulnerability

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...

Visual Studio Code Information Disclosure Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to disclose information over a network...

Visual Studio Code Security Feature Bypass Vulnerability

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...