Lucene search

Visual Studio Code Security Vulnerabilities

cve

CVE-2018-0597

Untrusted search path vulnerability in the installer of Visual Studio Code allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

7.8CVSS

7.7AI Score

0.323EPSS

2018-06-26 02:29 PM

cve

CVE-2019-0728

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visual Studio Code Remote Code Execution Vulnerability'.

7.8CVSS

8.1AI Score

0.083EPSS

2019-03-06 12:00 AM

cve

CVE-2019-1414

An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to users of a local computer, aka 'Visual Studio Code Elevation of Privilege Vulnerability'.

7.8CVSS

7.5AI Score

0.0004EPSS

2020-01-24 09:15 PM

2501

cve

CVE-2020-0604

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrativ...

7.8CVSS

8.1AI Score

0.003EPSS

2020-08-17 07:15 PM

cve

CVE-2020-1171

A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1192.

8.8CVSS

8AI Score

0.047EPSS

2020-05-21 11:15 PM

cve

CVE-2020-1192

A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1171.

7.8CVSS

8.4AI Score

0.047EPSS

2020-05-21 11:15 PM

cve

CVE-2020-1416

An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.

8.8CVSS

8.7AI Score

0.006EPSS

2020-07-14 11:15 PM

187

cve

CVE-2020-16881

<p>A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with admi...

7.8CVSS

8AI Score

0.011EPSS

2020-09-11 05:15 PM

916

cve

CVE-2020-16977

<p>A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads a Jupyter notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative u...

7CVSS

7.2AI Score

0.011EPSS

2020-10-16 11:15 PM

131

cve

CVE-2020-17023

7.8CVSS

7.8AI Score

0.011EPSS

2020-10-16 11:15 PM

cve

CVE-2020-17104

Visual Studio Code JSHint Extension Remote Code Execution Vulnerability

7.8CVSS

7.8AI Score

0.011EPSS

2020-11-11 07:15 AM

cve

CVE-2020-17148

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

7.8CVSS

7.8AI Score

0.011EPSS

2020-12-10 12:15 AM

106

cve

CVE-2020-17150

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS

7.8AI Score

0.011EPSS

2020-12-10 12:15 AM

cve

CVE-2020-17159

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

7.8CVSS

7.8AI Score

0.011EPSS

2020-12-10 12:15 AM

cve

CVE-2020-17163

Visual Studio Code Python Extension Remote Code Execution Vulnerability

7.8CVSS

7.8AI Score

0.001EPSS

2023-12-29 05:15 PM

cve

CVE-2021-1639

Visual Studio Code Remote Code Execution Vulnerability

7CVSS

7.2AI Score

0.006EPSS

2021-02-25 11:15 PM

cve

CVE-2021-26437

Visual Studio Code Spoofing Vulnerability

5.5CVSS

6AI Score

0.001EPSS

2021-09-15 12:15 PM

cve

CVE-2021-27060

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS

7.8AI Score

0.014EPSS

2021-03-11 04:15 PM

cve

CVE-2021-27084

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

7.8CVSS

7.7AI Score

0.014EPSS

2021-03-11 04:15 PM

cve

CVE-2021-28457

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS

7.7AI Score

0.011EPSS

2021-04-13 08:15 PM

cve

CVE-2021-28469

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS

7.7AI Score

0.011EPSS

2021-04-13 08:15 PM

cve

CVE-2021-28471

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS

7.8AI Score

0.011EPSS

2021-04-13 08:15 PM

cve

CVE-2021-28473

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS

7.7AI Score

0.011EPSS

2021-04-13 08:15 PM

cve

CVE-2021-28475

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS

7.7AI Score

0.011EPSS

2021-04-13 08:15 PM

cve

CVE-2021-28477

Visual Studio Code Remote Code Execution Vulnerability

7CVSS

7.2AI Score

0.005EPSS

2021-04-13 08:15 PM

cve

CVE-2021-28967

The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings.

9.8CVSS

9.6AI Score

0.007EPSS

2021-03-24 07:15 AM

cve

CVE-2021-31211

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS

7.9AI Score

0.012EPSS

2021-05-11 07:15 PM

100

cve

CVE-2021-31214

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS

7.9AI Score

0.012EPSS

2021-05-11 07:15 PM

cve

CVE-2021-34479

Microsoft Visual Studio Spoofing Vulnerability

7.8CVSS

6.2AI Score

0.002EPSS

2021-07-14 06:15 PM

cve

CVE-2021-34528

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS

7.9AI Score

0.154EPSS

2021-07-14 06:15 PM

cve

CVE-2021-34529

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS

7.9AI Score

0.016EPSS

2021-07-14 06:15 PM

755

cve

CVE-2021-42322

Visual Studio Code Elevation of Privilege Vulnerability

7.8CVSS

7.8AI Score

0.0004EPSS

2021-11-10 01:19 AM

cve

CVE-2021-43891

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS

7.9AI Score

0.152EPSS

2021-12-15 03:15 PM

967

cve

CVE-2021-43908

Visual Studio Code Spoofing Vulnerability

4.3CVSS

5.6AI Score

0.001EPSS

2021-12-15 03:15 PM

cve

CVE-2022-21991

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

8.1CVSS

8.6AI Score

0.009EPSS

2022-02-09 05:15 PM

183

cve

CVE-2022-24526

Visual Studio Code Spoofing Vulnerability

6.1CVSS

6.5AI Score

0.001EPSS

2022-03-09 05:15 PM

844

cve

CVE-2022-26921

Visual Studio Code Elevation of Privilege Vulnerability

7.3CVSS

7.4AI Score

0.0005EPSS

2022-04-15 07:15 PM

205

cve

CVE-2022-30129

Visual Studio Code Remote Code Execution Vulnerability

8.8CVSS

8.8AI Score

0.411EPSS

2022-05-10 09:15 PM

695

cve

CVE-2022-38020

Visual Studio Code Elevation of Privilege Vulnerability

7.3CVSS

7.7AI Score

0.0005EPSS

2022-09-13 07:15 PM

cve

CVE-2022-41034

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS

7.8AI Score

0.368EPSS

2022-10-11 07:15 PM

429

cve

CVE-2022-41042

Visual Studio Code Information Disclosure Vulnerability

7.4CVSS

7.8AI Score

0.004EPSS

2022-10-11 07:15 PM

cve

CVE-2023-21779

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS

7.9AI Score

0.002EPSS

2023-01-10 10:15 PM

807

cve

CVE-2023-24893

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS

7.8AI Score

0.001EPSS

2023-04-11 09:15 PM

132

cve

CVE-2023-29338

Visual Studio Code Spoofing Vulnerability

6.6CVSS

6.9AI Score

0.068EPSS

2023-05-09 06:15 PM

349

cve

CVE-2023-33144

Visual Studio Code Spoofing Vulnerability

6.6CVSS

6.8AI Score

0.002EPSS

2023-06-14 12:15 AM

594

cve

CVE-2023-36742

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS

7.8AI Score

0.001EPSS

2023-09-12 05:15 PM

506

cve

CVE-2024-26165

Visual Studio Code Elevation of Privilege Vulnerability

8.8CVSS

8.9AI Score

0.001EPSS

2024-03-12 05:15 PM

176