Lucene search
+L

2098 matches found

CVE
CVE
•added 2026/10/13 6:59 p.m.•77 views

CVE-2026-102229

A path traversal vulnerability (CWE-22 ) in Visual Studio Code exists due to an improper limitation of a pathname to a restricted directory. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a MEDIUM severity (CVSS 3.1: 6.8) and requires LOW pri...

6.8CVSS6.7AI score0.00932EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•67 views

Visual Studio Code Security Feature Bypass Vulnerability

Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

7.8CVSS7.4AI score0.00421EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•67 views

Visual Studio Code Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

8.8CVSS8.3AI score0.007EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•69 views

Visual Studio Code Security Feature Bypass Vulnerability

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

7CVSS7AI score0.00333EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•65 views

Visual Studio Code Security Feature Bypass Vulnerability

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...

6.1CVSS5.8AI score0.00258EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•70 views

Visual Studio Code Remote Code Execution Vulnerability

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network...

8.8CVSS8.2AI score0.00557EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•70 views

Visual Studio Code Security Feature Bypass Vulnerability

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

7.7CVSS7.4AI score0.00378EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•69 views

Visual Studio Code Remote Code Execution Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

9.6CVSS8.8AI score0.0065EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•67 views

Visual Studio Code Remote Code Execution Vulnerability

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...

8.8CVSS8.3AI score0.00408EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•69 views

Visual Studio Code Information Disclosure Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an authorized attacker to disclose information over a network...

6.8CVSS6.7AI score0.00932EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•68 views

Visual Studio Code Security Feature Bypass Vulnerability

Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

7.4CVSS7.3AI score0.00636EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•8 views

PT-2026-111937

🚨 CVE-2026-102235 Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network. šŸŽ–@cveNotify...

8.8CVSS8.2AI score0.00557EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-102235: Improper Encoding or Escaping of Output

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network...

8.8CVSS8.2AI score0.00557EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-102233: Missing Authorization

Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

7.8CVSS7.3AI score0.00421EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-102231: Improper Resolution of Path Equivalence

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

7.7CVSS7.2AI score0.00378EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-102229: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an authorized attacker to disclose information over a network...

6.8CVSS6.7AI score0.00932EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-70098: Missing Authorization

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...

8.8CVSS8.3AI score0.00408EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-102238: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

9.6CVSS8.8AI score0.0065EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-102234: Reliance on Untrusted Inputs in a Security Decision

Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

7.4CVSS7.3AI score0.00636EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-102851: Incorrect Privilege Assignment

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...

6.1CVSS5.7AI score0.00258EPSS
SaveExploits0References2
Rows per page
Query Builder