6263 matches found
CVE-2026-69370
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-103572
Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...
CVE-2026-102869
Access of resource using incompatible type 'type confusion' in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-102851
Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...
CVE-2026-102232
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-102233
Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-102229
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an authorized attacker to disclose information over a network...
CVE-2026-102231
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
EUVD-2026-100376
Access of resource using incompatible type 'type confusion' in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-102869
The .NET framework and Visual Studio are affected by a type confusion vulnerability (CWE-843 ), where an access of resource using incompatible type allows an unauthorized attacker to elevate privileges over a network. This vulnerability has a CVSS v3.1 score of 8.8 , indicating a High severity im...
EUVD-2026-100323
Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...
CVE-2026-102851
Visual Studio Code is affected by an incorrect privilege assignment vulnerability. This flaw allows an authorized attacker to bypass a security feature locally. The vulnerability has a Medium base severity (6.1) and requires local access and user interaction to exploit. Specific technical details...
EUVD-2026-99068
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-69370
Visual Studio Code is vulnerable to a command injection flaw due to the improper neutralization of special elements used in a command. This vulnerability allows an unauthorized attacker to achieve remote code execution over a network. While the impact is high, specific details regarding the vulne...
EUVD-2026-100600
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
EUVD-2026-100599
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-70098
A missing authorization vulnerability in Visual Studio Code allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is classified as HIGH severity (CVSS 3.1 score of 8.8). While the technical root cause and specific affected versions are not detailed in...
CVE-2026-102238
A path traversal vulnerability exists in Visual Studio Code , where an improper limitation of a pathname to a restricted directory allows an unauthorized attacker to execute code over a network . The vulnerability has a CRITICAL base severity score of 9.6 . No specific fix version or exploit deta...