2098 matches found
Visual Studio Code Source Editor Unauthenticated Access Disclosure
The vulnerability of Visual Studio Code’s source editor is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker, working remotely, to gain unauthorized access to protected information...
Microsoft Visual Studio Code Source Editor Security Bypass
The vulnerability of Microsoft Visual Studio Code’s editor is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...
.NET Visual Studio Code Information Disclosure
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to improper boundary removal of critical data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...
.NET Visual Studio Code Buffer Overflow Privilege Escalation
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
.NET Visual Studio Code Memory Leak Information Disclosure
The vulnerability of the .NET software platform and the Visual Studio Code code editor is related to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to disclose sensitive information...
.NET Visual Studio Code Buffer Overflow DoS
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
.NET Visual Studio Code HTTP Request Disclosure
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
.NET and the Visual Privilege Escalation
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to the lack of checking for the return value. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
.NET Visual Studio Code Buffer Overflow Privilege Escalation
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
.NET Visual Studio Code Critical Data Deletion DoS
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
Security Bulletin: Vulnerability in Spring Boot affects DB2 Dev Extension (CVE-2026-40992, CVE-2026-41001)
Summary Upgraded spring-boot-autoconfigure to 3.5.15 to remediate CVE-2026-40992 Improper Certificate Validation and CVE-2026-41001 Insecure Temporary File — highest CVSS Base Score 5.3 Medium — PVR0789890. Vulnerability Details CVEID:CVE-2026-40992 DESCRIPTION: Spring Boot's Mail...
BIT-MONGODB-2026-84967 Arbitrary command execution via shell-expanded connection string in Launch MongoDB Shell terminal
A component of the MongoDB extension for Visual Studio Code does not neutralize special characters in a connection string before that value is placed into a command line the extension composes for an integrated terminal. An unauthenticated remote unauthorized-user who persuades a developer to...
Security Update for Microsoft Visual Studio Code (September 2026)
The remote host has an application installed that is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-784...
vulnerabilities handled in Microsoft Developer Tools
Microsoft has identified 15 vulnerabilities in various Developer Tools. A malicious individual could exploit these vulnerabilities to carry out attacks that can cause damage, as listed in the table below. The most severe vulnerability, with the identifier CVE-2026-81376, has a CVSS score of 9.6. ...
CVE-2026-81378
Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-81379
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-81380
Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-81379
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...