5193 matches found
EUVD-2026-56589
Improper control of generation of code 'code injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
...
CVE-2026-70336
CVE-2026-70336 – Visual Studio Code Remote Code Execution : The vulnerability is described as improper control of code generation (code injection) in Visual Studio Code that could allow an unauthorized attacker to execute arbitrary code over a network. The NVD/CVE entries indicate a high-severity...
CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability
...
EUVD-2026-56588
Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...
CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
...
EUVD-2026-56563
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2026-69306
CVE-2026-69306 affects Visual Studio Code; it describes an insecure failure mode where the product does not fail securely, allowing an unauthorized attacker to bypass a security feature over a network. The CVSS v3.1 base score is 8.2 (High): Network attack vector, low attack complexity, no privil...
CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability
...
EUVD-2026-56561
Improper neutralization of special elements used in an os command 'os command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2026-69278
CVE-2026-69278 affects Visual Studio Code. The issue is described as incorrect authorization that allows an unauthorized attacker to bypass a security feature locally. According to the metrics, the CVSS‑3.1 base score is 7.8 (HIGH), with local attack vector, no privileges required, and user inter...
CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability
...
EUVD-2026-56562
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2026-69320
CVE-2026-69320 concerns Visual Studio Code. The issue is an improper neutralization of special elements used in an OS command (OS command injection) that could allow an unauthorized attacker to execute code remotely over a network. Affected product is Visual Studio Code; the root cause is imprope...