2098 matches found
CVE-2026-102233
Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
EUVD-2026-100323
Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...
CVE-2026-102851
Visual Studio Code is affected by an incorrect privilege assignment vulnerability. This flaw allows an authorized attacker to bypass a security feature locally. The vulnerability has a Medium base severity (6.1) and requires local access and user interaction to exploit. Specific technical details...
EUVD-2026-99068
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-69370
Visual Studio Code is vulnerable to a command injection flaw due to the improper neutralization of special elements used in a command. This vulnerability allows an unauthorized attacker to achieve remote code execution over a network. While the impact is high, specific details regarding the vulne...
EUVD-2026-100600
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
EUVD-2026-100599
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-102238
A path traversal vulnerability exists in Visual Studio Code , where an improper limitation of a pathname to a restricted directory allows an unauthorized attacker to execute code over a network . The vulnerability has a CRITICAL base severity score of 9.6 . No specific fix version or exploit deta...
CVE-2026-70098
A missing authorization vulnerability in Visual Studio Code allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is classified as HIGH severity (CVSS 3.1 score of 8.8). While the technical root cause and specific affected versions are not detailed in...
EUVD-2026-100601
Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network...
EUVD-2026-99036
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
EUVD-2026-100602
Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
EUVD-2026-99037
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
EUVD-2026-99038
Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-102231
A security feature bypass vulnerability exists in Visual Studio Code due to the improper resolution of path equivalence . This flaw allows an unauthorized attacker to bypass local security features. The vulnerability has been identified by Microsoft and is categorized under CWE-41 . While the spe...
CVE-2026-102234
The Visual Studio Code application is vulnerable to a security feature bypass due to the reliance on untrusted inputs in a security decision. An unauthorized attacker can exploit this flaw over a network to bypass specific security features. The vulnerability has a CVSS 3.1 score of 7.4 (HIGH) , ...
CVE-2026-102233
A missing authorization vulnerability in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally . The vulnerability has a CVSS 3.1 score of 7.8 (High), with the attack vector identified as local and requiring user interaction. No specific component details, root c...
CVE-2026-102232
A security feature bypass vulnerability exists in Visual Studio Code due to incorrect authorization . An unauthorized attacker can exploit this flaw locally to bypass security protections. The vulnerability has a HIGH base severity (CVSS 3.1: 7.0) and affects confidentiality, integrity, and avail...
CVE-2026-102235
A Remote Code Execution vulnerability exists in Visual Studio Code due to improper encoding or escaping of output. An unauthorized attacker can exploit this flaw to execute arbitrary code over a network. The vulnerability has a High severity rating with a CVSS score of 8.8 . While specific affect...