6064 matches found
PT-2026-63362
A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text with...
CVE-2026-44187: Plaintext Storage of a Password
A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text with...
CVE-2026-44191: Improper Neutralization of Special Elements used in an OS Command
A flaw was found in the Visual Studio Code Ansible Lightspeed extension. This command injection vulnerability CWE-78 arises from improper handling of the ansible.executionEnvironment.containerOptions and ansible.executionEnvironment.volumeMounts settings, allowing an attacker to inject shell...
PT-2026-63374
A flaw was found in the Visual Studio Code Ansible Lightspeed extension. This command injection vulnerability CWE-78 arises from improper handling of the ansible.executionEnvironment.containerOptions and ansible.executionEnvironment.volumeMounts settings, allowing an attacker to inject shell...
PT-2026-63364
Name of the Vulnerable Software and Affected Versions Ansible Lightspeed Visual Studio Code extension affected versions not specified Description A command injection flaw exists where the extension fails to properly validate user input as a file path within the ansible.python.activationScript...
PT-2026-63363
A flaw was found in the Visual Studio Code Ansible Lightspeed extension's AnsiblePlaybookRunProvider. This command injection vulnerability allows an attacker to craft a malicious playbook filename containing special characters. When a victim runs the playbook, these characters are not properly...
Security Update for Microsoft Visual Studio Code (July 2026)
The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.128.1. It is, therefore, affected by multiple vulnerabilities: - Improper neutralization of special elements in output used by a downstream component 'injection' in GitHub Copilot and Visual Studio allo...
Vulnerability of .NET and Microsoft Visual Studio software platforms, related to deserialization mechanism flaws, allows attackers to execute arbitrary code.
The vulnerability of .NET and Microsoft Visual Studio software platforms is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Visual Studio Code security feature bypass vulnerability (CNVD-2026-29404)
Microsoft Visual Studio Code is a lightweight yet powerful source code editor that supports multiple programming languages and extensions. Microsoft Visual Studio Code has a security feature bypass vulnerability, which stems from improper handling of requests from functions within an untrusted...
EUVD-2026-44356
Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally...
CVE-2026-47305
Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally...
CVE-2026-47305 Visual Studio Remote Code Execution Vulnerability
...
CVE-2026-47305
Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally...
CVE-2026-47305 Visual Studio Remote Code Execution Vulnerability
...
CVE-2026-47305
Technical details such as affected products, component versions, root cause, and mitigation are not publicly available in the provided documents. Monitor for updates from MSRC and NCSC advisories.
vulnerabilities handled in Microsoft Developer Tools
Microsoft has identified vulnerabilities in Developer Tools, including .NET and Visual Studio. A malicious individual could exploit these vulnerabilities to execute attacks that can cause damage in the categories mentioned in the attached table. For successful exploitation, the malicious actor...
EUVD-2026-44035
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code locally...
EUVD-2026-43992
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...