5103 matches found
CVE-2026-41613 Visual Studio Code Elevation of Privilege Vulnerability
...
CVE-2026-41613
CVE-2026-41613 involves session fixation in Visual Studio Code that allows an unauthorized attacker to elevate privileges over a network. The connected sources corroborate the affected product as Visual Studio Code and describe the impact as privilege elevation via network access. The available d...
CVE-2026-41612 Visual Studio Code Information Disclosure Vulnerability
...
CVE-2026-41612
Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally...
CVE-2026-41612
CVE-2026-41612 describes a relative path traversal in Visual Studio Code that allows an attacker with local access to disclose information on the compromised machine. The vulnerability is described as a local attack with high confidentiality impact and medium overall severity (CVSS 3.1: AV:L/AC:L...
EUVD-2026-29695
Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally...
CVE-2026-41612 Visual Studio Code Information Disclosure Vulnerability
...
CVE-2026-41611
Technical details about CVE-2026-41611 are not provided in the supplied documents. No specifics on affected versions, root cause, or remediation are included. Monitor for updates from official sources.
CVE-2026-41611
Improper neutralization of script-related html tags in a web page basic xss in Visual Studio Code allows an unauthorized attacker to execute code locally...
CVE-2026-41611 Visual Studio Code Remote Code Execution Vulnerability
...
EUVD-2026-29694
Improper neutralization of script-related html tags in a web page basic xss in Visual Studio Code allows an unauthorized attacker to execute code locally...
CVE-2026-41611 Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2026-41610 Visual Studio Code Security Feature Bypass Vulnerability
...
EUVD-2026-29693
Improper neutralization of input during web page generation 'cross-site scripting' in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-41109
Improper neutralization of special elements in output used by a downstream component 'injection' in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-41109 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2026-41109 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2026-41610
Improper neutralization of input during web page generation 'cross-site scripting' in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-41610 Visual Studio Code Security Feature Bypass Vulnerability
...
EUVD-2026-29691
Improper neutralization of special elements in output used by a downstream component 'injection' in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network...