2098 matches found
CVE-2026-102232: Incorrect Authorization
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
PT-2026-112217
🚨 CVE-2026-70098 Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. 🎖@cveNotify...
PT-2026-112052
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
PT-2026-111932
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an authorized attacker to disclose information over a network...
CVE-2026-69370: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
Microsoft VS Code: CVE-2026-69370: Visual Studio Code Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
PT-2026-111936
Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Reliance on untrusted inputs in a security decision allows an unauthorized attacker to bypass the Workspace Trust security feature over a network. Workspace Trust is designed to...
Microsoft VS Code: CVE-2026-70098: Visual Studio Code Remote Code Execution Vulnerability
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...
PT-2026-111938
Name of the Vulnerable Software and Affected Versions Visual Studio Code versions prior to 1.141.1 Description An issue exists where improper limitation of a pathname to a restricted directory, known as path traversal, allows an unauthorized attacker to execute code over a network. Path traversal...
PT-2026-111939
Name of the Vulnerable Software and Affected Versions Visual Studio Code versions prior to 1.141.1 Description Incorrect privilege assignment occurs when MCP sandboxing is enabled, allowing an authorized attacker to bypass a security feature locally. The issue arises because approvals for network...
PT-2026-111934
Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Incorrect authorization allows an unauthorized attacker to bypass a security feature locally. This issue occurs where autonomous AI coding assistants process untrusted input...
PT-2026-111935
Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
PT-2026-111933
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-49484
The Code for IBM i Visual Studio Code extension (prior to version 3.0.1 ) contains a vulnerability in src/ui/views/objectBrowser.ts. The component stores Object Browser downloads and edit-save flow content in the shared /tmp directory without reliable cleanup, which may allow other local accounts...
Visual Studio Code Authentication Bypass
The vulnerability of Visual Studio Code’s source editor involves bypassing authentication using a key controlled by the user. Exploiting this vulnerability allows an attacker to circumvent existing security mechanisms remotely...
Visual Studio Code Path Traversal
The vulnerability of Visual Studio Code’s source editor is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...
Visual Studio Code Source Editor Unauthenticated Access Disclosure
The vulnerability of Visual Studio Code’s source editor is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker, working remotely, to gain unauthorized access to protected information...
Visual Studio Code Source Editor
The vulnerability of Visual Studio Code’s source editor is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
Visual Studio Code Source Editor HTTP Request Processing
The vulnerability of Visual Studio Code’s source editor is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
Visual Studio Code Source Editor XSS
The vulnerability of Visual Studio Code’s source editor is related to the manipulation of intersite requests. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...