CVE-2026-102231

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-102851

Visual Studio Code is affected by an incorrect privilege assignment vulnerability. This flaw allows an authorized attacker to bypass a security feature locally. The vulnerability has a Medium base severity (6.1) and requires local access and user interaction to exploit. Specific technical details...

EUVD-2026-100323

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...

EUVD-2026-99068

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2026-69370

Visual Studio Code is vulnerable to a command injection flaw due to the improper neutralization of special elements used in a command. This vulnerability allows an unauthorized attacker to achieve remote code execution over a network. While the impact is high, specific details regarding the vulne...

CVE-2026-102238

A path traversal vulnerability exists in Visual Studio Code , where an improper limitation of a pathname to a restricted directory allows an unauthorized attacker to execute code over a network . The vulnerability has a CRITICAL base severity score of 9.6 . No specific fix version or exploit deta...

EUVD-2026-100599

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...

EUVD-2026-100600

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2026-70098

A missing authorization vulnerability in Visual Studio Code allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is classified as HIGH severity (CVSS 3.1 score of 8.8). While the technical root cause and specific affected versions are not detailed in...

EUVD-2026-100601

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network...

EUVD-2026-99038

Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

EUVD-2026-99036

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

EUVD-2026-99037

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

EUVD-2026-100602

Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-102235

A Remote Code Execution vulnerability exists in Visual Studio Code due to improper encoding or escaping of output. An unauthorized attacker can exploit this flaw to execute arbitrary code over a network. The vulnerability has a High severity rating with a CVSS score of 8.8 . While specific affect...

CVE-2026-102234

The Visual Studio Code application is vulnerable to a security feature bypass due to the reliance on untrusted inputs in a security decision. An unauthorized attacker can exploit this flaw over a network to bypass specific security features. The vulnerability has a CVSS 3.1 score of 7.4 (HIGH) , ...

CVE-2026-102233

A missing authorization vulnerability in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally . The vulnerability has a CVSS 3.1 score of 7.8 (High), with the attack vector identified as local and requiring user interaction. No specific component details, root c...

CVE-2026-102232

A security feature bypass vulnerability exists in Visual Studio Code due to incorrect authorization . An unauthorized attacker can exploit this flaw locally to bypass security protections. The vulnerability has a HIGH base severity (CVSS 3.1: 7.0) and affects confidentiality, integrity, and avail...

CVE-2026-102231

A security feature bypass vulnerability exists in Visual Studio Code due to the improper resolution of path equivalence . This flaw allows an unauthorized attacker to bypass local security features. The vulnerability has been identified by Microsoft and is categorized under CWE-41 . While the spe...

CVE-2026-102229

A path traversal vulnerability (CWE-22 ) in Visual Studio Code exists due to an improper limitation of a pathname to a restricted directory. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a MEDIUM severity (CVSS 3.1: 6.8) and requires LOW pri...