Lucene search
+L

2003 matches found

Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•73 views

Visual Studio Code Security Feature Bypass Vulnerability

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

7.8CVSS5.8AI score0.00466EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•78 views

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

5.9CVSS5.9AI score0.00619EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•71 views

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.8AI score0.00874EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•67 views

Visual Studio Code Security Feature Bypass Vulnerability

Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.2CVSS7.6AI score0.00541EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-81378: Interpretation Conflict

Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.2CVSS7.6AI score0.00541EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-88058

Inconsistent interpretation of http requests 'http request/response smuggling' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.2CVSS7.6AI score0.00541EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•9 views

CVE-2026-81383: Use of Incorrectly-Resolved Name or Reference

Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network...

7.4CVSS7.2AI score0.00922EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•26 views

PT-2026-88062

Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.2CVSS7.6AI score0.00541EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•8 views

CVE-2026-81356: Inconsistent Interpretation of HTTP Requests

Inconsistent interpretation of http requests 'http request/response smuggling' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.2CVSS7.6AI score0.00541EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•8 views

CVE-2026-81357: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.2CVSS7.6AI score0.00513EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•24 views

PT-2026-88063

Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.2CVSS7.6AI score0.00541EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•28 views

PT-2026-88064

Name of the Vulnerable Software and Affected Versions GitHub Copilot affected versions not specified Visual Studio Code affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized attacker to disclos...

5.9CVSS5.8AI score0.00619EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•24 views

PT-2026-88066

Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network...

7.4CVSS7.2AI score0.00922EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•25 views

PT-2026-88059

Server-side request forgery ssrf in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.2CVSS7.6AI score0.00513EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•11 views

CVE-2026-81379: Not Failing Securely

Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.2CVSS7.6AI score0.00541EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•10 views

CVE-2026-78462: Authorization Bypass Through User-Controlled Key

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.8CVSS7.8AI score0.00758EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•25 views

PT-2026-88060

VULN-196220 is now CVE-2026-81376. It is a very simple and very dangerous vulnerability that allows code execution when opening untrusted code in sandboxed untrusted mode. Please update ASAP!...

9.6CVSS8.3AI score0.00819EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-81376: Incomplete Comparison with Missing Factors

Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

9.6CVSS8.1AI score0.00819EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•9 views

CVE-2026-81381: Insufficiently Protected Credentials

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.8AI score0.00874EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•23 views

PT-2026-88061

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to perform tampering over a network...

6.5CVSS5.9AI score0.00756EPSS
SaveExploits0References2
Rows per page
Query Builder