5213 matches found
CVE-2026-47285
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-47285
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-54981
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...
EUVD-2026-56605
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability
...
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability
...
CVE-2026-54981
The CVE-2026-54981 entry concerns the Visual Studio Code Python extension, where inclusion of functionality from an untrusted control sphere leads to a local security feature bypass. Affected component: VS Code Python extension; root cause described as untrusted control sphere function inclusion....
EUVD-2026-56589
Improper control of generation of code 'code injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
...
CVE-2026-70336
CVE-2026-70336 – Visual Studio Code Remote Code Execution : The vulnerability is described as improper control of code generation (code injection) in Visual Studio Code that could allow an unauthorized attacker to execute arbitrary code over a network. The NVD/CVE entries indicate a high-severity...
CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability
...
EUVD-2026-56588
Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...
CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
...
CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability
...
EUVD-2026-56563
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-69306
CVE-2026-69306 affects Visual Studio Code; it describes an insecure failure mode where the product does not fail securely, allowing an unauthorized attacker to bypass a security feature over a network. The CVSS v3.1 base score is 8.2 (High): Network attack vector, low attack complexity, no privil...
CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2026-69278
CVE-2026-69278 affects Visual Studio Code. The issue is described as incorrect authorization that allows an unauthorized attacker to bypass a security feature locally. According to the metrics, the CVSS‑3.1 base score is 7.8 (HIGH), with local attack vector, no privileges required, and user inter...