6263 matches found
EUVD-2026-100601
Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network...
EUVD-2026-99036
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
EUVD-2026-99037
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-102232
A security feature bypass vulnerability exists in Visual Studio Code due to incorrect authorization . An unauthorized attacker can exploit this flaw locally to bypass security protections. The vulnerability has a HIGH base severity (CVSS 3.1: 7.0) and affects confidentiality, integrity, and avail...
CVE-2026-102231
A security feature bypass vulnerability exists in Visual Studio Code due to the improper resolution of path equivalence . This flaw allows an unauthorized attacker to bypass local security features. The vulnerability has been identified by Microsoft and is categorized under CWE-41 . While the spe...
CVE-2026-102234
The Visual Studio Code application is vulnerable to a security feature bypass due to the reliance on untrusted inputs in a security decision. An unauthorized attacker can exploit this flaw over a network to bypass specific security features. The vulnerability has a CVSS 3.1 score of 7.4 (HIGH) , ...
CVE-2026-102233
A missing authorization vulnerability in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally . The vulnerability has a CVSS 3.1 score of 7.8 (High), with the attack vector identified as local and requiring user interaction. No specific component details, root c...
CVE-2026-102235
A Remote Code Execution vulnerability exists in Visual Studio Code due to improper encoding or escaping of output. An unauthorized attacker can exploit this flaw to execute arbitrary code over a network. The vulnerability has a High severity rating with a CVSS score of 8.8 . While specific affect...
EUVD-2026-99035
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an authorized attacker to disclose information over a network...
CVE-2026-102229
A path traversal vulnerability (CWE-22 ) in Visual Studio Code exists due to an improper limitation of a pathname to a restricted directory. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a MEDIUM severity (CVSS 3.1: 6.8) and requires LOW pri...
EUVD-2026-99027
Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...
CVE-2026-103572
A code injection vulnerability exists in Visual Studio Tools for Applications and SQL Server Management Studio . Due to improper control of code generation, an unauthorized attacker can execute arbitrary code over a network. This vulnerability has a CVSS 3.1 score of 8.8 and is reported to have a...
vulnerabilities handled in Microsoft Developer Tools
Microsoft has identified vulnerabilities in various components of the Developer Tools, such as .NET and Visual Studio. Malicious actors can exploit these vulnerabilities, resulting in damages as described in the tables below. .NET: |------------------|------|-------------------------------------|...
Visual Studio Code Security Feature Bypass Vulnerability
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...
Visual Studio Code Remote Code Execution Vulnerability
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...
Visual Studio Code Security Feature Bypass Vulnerability
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
Visual Studio Code Information Disclosure Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an authorized attacker to disclose information over a network...
Visual Studio Code Security Feature Bypass Vulnerability
Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...