6064 matches found
PT-2026-8354
Name of the Vulnerable Software and Affected Versions Code Runner versions prior to 0.12.2 Description A flaw exists in the code-runner.executorMap setting of the Code Runner extension for Visual Studio Code. This allows for the execution of arbitrary code when a specially crafted workspace is...
PT-2026-8355
Name of the Vulnerable Software and Affected Versions Visual Studio Code Extensions Markdown Preview Enhanced version 0.8.18 Description A flaw exists in Visual Studio Code Extensions Markdown Preview Enhanced version 0.8.18 that could allow attackers to execute arbitrary code. This is achieved b...
CVE-2025-65716
An issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to execute arbitrary code via uploading a crafted .Md file...
CVE-2025-65717
An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...
CVE-2025-65715
An issue in the code-runner.executorMap setting of Visual Studio Code Extensions Code Runner v0.12.2 allows attackers to execute arbitrary code when opening a crafted workspace...
CVE-2025-65717
An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...
CVE-2025-65715
An issue in the code-runner.executorMap setting of Visual Studio Code Extensions Code Runner v0.12.2 allows attackers to execute arbitrary code when opening a crafted workspace...
CVE-2025-65717
The Visual Studio Code Live Server extension (v5.7.9) is vulnerable to file exfiltration due to a lack of protective measures for website structures. The root cause allows a malicious actor to use a specially crafted HTML page to trigger user interaction, enabling the exfiltration of protected fi...
CVE-2025-65717: Improper Neutralization of Input During Web Page Generation
An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...
CVE-2025-65716: Improper Control of Generation of Code
An issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to execute arbitrary code via uploading a crafted .Md file...
CVE-2025-65716
An issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to execute arbitrary code via uploading a crafted .Md file...
The vulnerability of the Microsoft Visual Studio software lies in its inadequate control over code generation, which allows attackers to execute arbitrary code.
The vulnerability of the Microsoft Visual Studio software lies in the insufficient control over code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Microsoft Visual Studio software development tool, related to the lack of measures taken to clean data at the management level, allows attackers to enhance their privileges.
The vulnerability of the Microsoft Visual Studio software lies in the lack of measures taken to clean up data at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of Microsoft Visual Studio Code’s source editor, related to the lack of data cleaning at the control level, allows attackers to circumvent existing security restrictions.
The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of measures taken to clean up data at the control level. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions remotely...
The vulnerability of Microsoft Visual Studio Code’s editor, related to synchronization errors when using a shared resource (“Race Situation”), allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Visual Studio Code’s editor is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Security Updates for Microsoft Visual Studio Products (February 2026)
The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio allows an unauthorized attacker to execu...
Security Update for Microsoft Visual Studio Code (February 2026)
The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.109.2. It is, therefore, affected by multiple vulnerabilities: - Time-of-check time-of-use toctou race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a...
CVE-2026-21518
Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...