1274232 matches found
EUVD-2026-100602
Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
EUVD-2026-99037
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
EUVD-2026-99036
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
EUVD-2026-99038
Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
EUVD-2026-100601
Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-102234
The Visual Studio Code application is vulnerable to a security feature bypass due to the reliance on untrusted inputs in a security decision. An unauthorized attacker can exploit this flaw over a network to bypass specific security features. The vulnerability has a CVSS 3.1 score of 7.4 (HIGH) , ...
CVE-2026-102233
A missing authorization vulnerability in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally . The vulnerability has a CVSS 3.1 score of 7.8 (High), with the attack vector identified as local and requiring user interaction. No specific component details, root c...
CVE-2026-102231
A security feature bypass vulnerability exists in Visual Studio Code due to the improper resolution of path equivalence . This flaw allows an unauthorized attacker to bypass local security features. The vulnerability has been identified by Microsoft and is categorized under CWE-41 . While the spe...
CVE-2026-102232
A security feature bypass vulnerability exists in Visual Studio Code due to incorrect authorization . An unauthorized attacker can exploit this flaw locally to bypass security protections. The vulnerability has a HIGH base severity (CVSS 3.1: 7.0) and affects confidentiality, integrity, and avail...
CVE-2026-102235
A Remote Code Execution vulnerability exists in Visual Studio Code due to improper encoding or escaping of output. An unauthorized attacker can exploit this flaw to execute arbitrary code over a network. The vulnerability has a High severity rating with a CVSS score of 8.8 . While specific affect...
EUVD-2026-99035
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an authorized attacker to disclose information over a network...
CVE-2026-102229
A path traversal vulnerability (CWE-22 ) in Visual Studio Code exists due to an improper limitation of a pathname to a restricted directory. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a MEDIUM severity (CVSS 3.1: 6.8) and requires LOW pri...
CVE-2026-102227
A heap-based buffer overflow exists in the Windows Resilient File System (ReFS) . This vulnerability allows an authorized attacker to achieve local code execution . Official remediation is available via Microsoft updates.
CVE-2026-108400
A vulnerability in the Microsoft Windows Codecs Library involving an integer overflow or wraparound allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. Specifically, this affects the HEVC Video Extensions component. The vulnerability carries a HIGH base severity...
CVE-2026-108457
An out-of-bounds write vulnerability exists in Microsoft Windows PDF that could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-787 . While specific technical details regarding the underlying function or file are not provided, the impact is...
EUVD-2026-99027
Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...
CVE-2026-103572
A code injection vulnerability exists in Visual Studio Tools for Applications and SQL Server Management Studio . Due to improper control of code generation, an unauthorized attacker can execute arbitrary code over a network. This vulnerability has a CVSS 3.1 score of 8.8 and is reported to have a...
EUVD-2026-99026
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-102850
A heap-based buffer overflow vulnerability exists in Microsoft Office Access , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is confirmed to have a HIGH severity (CVSS 3.1 score of 8.8). To successfully exploit this, an attacker woul...