1865 matches found
CVE-2026-59113
CVE-2026-59113 concerns Visual Studio Code. The vulnerability is described as missing authorization that allows an unauthorized attacker to execute code over a network. The NVD entry cites a CVSS v3.1 base score of 8.8 (High) with network attack vector, no privileges required, user interaction re...
CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2026-58650
CVE-2026-58650 describes an authorization bypass in Visual Studio Code triggered by a user-controlled key, enabling a local attacker to bypass a security feature. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with Local attack vector, Low attack complexity, and no privileges required, ...
CVE-2026-58650
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
EUVD-2026-56289
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
Improper neutralization of special elements used in an os command 'os command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...
Visual Studio Code Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
Visual Studio Code Security Feature Bypass Vulnerability
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
Visual Studio Code Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to disclose information over a network...
Visual Studio Code Security Feature Bypass Vulnerability
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
Visual Studio Code Security Feature Bypass Vulnerability
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CoPilot Chat Security Feature Bypass Vulnerability
No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network...
Visual Studio Code Remote Code Execution Vulnerability
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-69278: Incorrect Authorization
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
PT-2026-70740
Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Incorrect authorization allows an unauthorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information about a newer version that...
PT-2026-70769
Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Improper control of code generation leads to a code injection flaw, which allows an unauthorized attacker to execute arbitrary code over a network. Recommendations At the moment,...
CVE-2026-47285: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to disclose information over a network...
PT-2026-70742
Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description An OS command injection issue exists where improper neutralization of special elements used in an OS command allows an unauthorized attacker to execute code over a network...