EUVD-2026-56588

Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...

EUVD-2026-56563

Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability

...

CVE-2026-69306

CVE-2026-69306 affects Visual Studio Code; it describes an insecure failure mode where the product does not fail securely, allowing an unauthorized attacker to bypass a security feature over a network. The CVSS v3.1 base score is 8.2 (High): Network attack vector, low attack complexity, no privil...

CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability

...

CVE-2026-69278

CVE-2026-69278 affects Visual Studio Code. The issue is described as incorrect authorization that allows an unauthorized attacker to bypass a security feature locally. According to the metrics, the CVSS‑3.1 base score is 7.8 (HIGH), with local attack vector, no privileges required, and user inter...

CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability

...

EUVD-2026-56561

Improper neutralization of special elements used in an os command 'os command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2026-69320

CVE-2026-69320 concerns Visual Studio Code. The issue is an improper neutralization of special elements used in an OS command (OS command injection) that could allow an unauthorized attacker to execute code remotely over a network. Affected product is Visual Studio Code; the root cause is imprope...

EUVD-2026-56562

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability

...

CVE-2026-47285

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-47285

CVE-2026-47285 describes an information-disclosure vulnerability in Visual Studio Code due to improper neutralization of special elements used in a command (command injection). The NVD entry and CVE records state that an unauthorized attacker could disclose information over a network. The CVSS 3....

EUVD-2026-56306

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-59113

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2026-59113

CVE-2026-59113 concerns Visual Studio Code. The vulnerability is described as missing authorization that allows an unauthorized attacker to execute code over a network. The NVD entry cites a CVSS v3.1 base score of 8.8 (High) with network attack vector, no privileges required, user interaction re...

EUVD-2026-56304

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2026-58650

CVE-2026-58650 describes an authorization bypass in Visual Studio Code triggered by a user-controlled key, enabling a local attacker to bypass a security feature. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with Local attack vector, Low attack complexity, and no privileges required, ...