Visual Studio Code Security Vulnerabilities and Issues — Visual Studio Code CVE List

Lucene search

MicrosoftVisual Studio Code

49 matches found

CVE•added 2020/01/24 9:15 p.m.•2533 views

CVE-2019-1414

An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to users of a local computer, aka 'Visual Studio Code Elevation of Privilege Vulnerability'.

7.8CVSS7.5AI score0.00868EPSS

CVE•added 2021/12/15 3:15 p.m.•987 views

CVE-2021-43891

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.11914EPSS

CVE•added 2020/09/11 5:15 p.m.•939 views

CVE-2020-16881

<p>A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with admi...

9.3CVSS8AI score0.15417EPSS

CVE•added 2022/03/09 5:15 p.m.•870 views

CVE-2022-24526

Visual Studio Code Spoofing Vulnerability

6.1CVSS6.5AI score0.0071EPSS

CVE•added 2023/01/10 10:15 p.m.•845 views

CVE-2023-21779

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.0027EPSS

CVE•added 2021/07/14 6:15 p.m.•778 views

CVE-2021-34529

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.02354EPSS

CVE•added 2022/05/10 9:15 p.m.•719 views

CVE-2022-30129

Visual Studio Code Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.41076EPSS

CVE•added 2023/06/14 12:15 a.m.•638 views

CVE-2023-33144

Visual Studio Code Spoofing Vulnerability

6.6CVSS6.6AI score0.00641EPSS

CVE•added 2023/09/12 5:15 p.m.•541 views

CVE-2023-36742

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00235EPSS

CVE•added 2022/10/11 7:15 p.m.•481 views

CVE-2022-41034

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.63429EPSS

CVE•added 2023/05/09 6:15 p.m.•389 views

CVE-2023-29338

Visual Studio Code Spoofing Vulnerability

6.6CVSS6.7AI score0.00647EPSS

CVE•added 2022/04/15 7:15 p.m.•241 views

CVE-2022-26921

Visual Studio Code Elevation of Privilege Vulnerability

7.8CVSS7.4AI score0.00649EPSS

CVE•added 2022/02/09 5:15 p.m.•216 views

CVE-2022-21991

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

8.1CVSS8.3AI score0.03343EPSS

CVE•added 2024/03/12 5:15 p.m.•212 views

CVE-2024-26165

Visual Studio Code Elevation of Privilege Vulnerability

8.8CVSS8.7AI score0.0273EPSS

CVE•added 2023/04/11 9:15 p.m.•209 views

CVE-2023-24893

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.01109EPSS

CVE•added 2020/07/14 11:15 p.m.•208 views

CVE-2020-1416

An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.

9.3CVSS8.7AI score0.10481EPSS

CVE•added 2020/10/16 11:15 p.m.•148 views

CVE-2020-16977

<p>A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads a Jupyter notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative u...

9.3CVSS7.2AI score0.04865EPSS

CVE•added 2021/02/25 11:15 p.m.•136 views

CVE-2021-1639

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7AI score0.01254EPSS

CVE•added 2022/09/13 7:15 p.m.•126 views

CVE-2022-38020

Visual Studio Code Elevation of Privilege Vulnerability

7.3CVSS7.4AI score0.00608EPSS

CVE•added 2020/12/10 12:15 a.m.•125 views

CVE-2020-17148

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.04604EPSS

CVE•added 2021/05/11 7:15 p.m.•122 views

CVE-2021-31211

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.02223EPSS

CVE•added 2025/04/12 2:15 a.m.•122 views

CVE-2025-32726

Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally.

6.8CVSS6.7AI score0.0006EPSS

CVE•added 2021/04/13 8:15 p.m.•119 views

CVE-2021-28469

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.02989EPSS

CVE•added 2021/05/11 7:15 p.m.•112 views

CVE-2021-31214

Visual Studio Code Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.02265EPSS

CVE•added 2020/08/17 7:15 p.m.•102 views

CVE-2020-0604

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrativ...

9.3CVSS8.1AI score0.09238EPSS

CVE•added 2021/07/14 6:15 p.m.•102 views

CVE-2021-34479

Microsoft Visual Studio Spoofing Vulnerability

7.8CVSS6.3AI score0.03332EPSS

CVE•added 2021/11/10 1:19 a.m.•102 views

CVE-2021-42322

Visual Studio Code Elevation of Privilege Vulnerability

7.8CVSS7.9AI score0.00193EPSS

CVE•added 2021/04/13 8:15 p.m.•101 views

CVE-2021-28475

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.02989EPSS

CVE•added 2020/10/16 11:15 p.m.•97 views

CVE-2020-17023

9.3CVSS7.8AI score0.15298EPSS

CVE•added 2021/04/13 8:15 p.m.•97 views

CVE-2021-28473

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.02989EPSS

CVE•added 2022/10/11 7:15 p.m.•96 views

CVE-2022-41042

Visual Studio Code Information Disclosure Vulnerability

7.4CVSS7.4AI score0.00589EPSS

CVE•added 2021/04/13 8:15 p.m.•95 views

CVE-2021-28457

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.02989EPSS

CVE•added 2021/07/14 6:15 p.m.•87 views

CVE-2021-34528

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.02989EPSS

CVE•added 2024/10/08 6:15 p.m.•86 views

CVE-2024-43488

Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.

9.8CVSS9.8AI score0.03391EPSS

CVE•added 2021/09/15 12:15 p.m.•85 views

CVE-2021-26437

Visual Studio Code Spoofing Vulnerability

5.5CVSS5.8AI score0.01512EPSS

CVE•added 2020/12/10 12:15 a.m.•84 views

CVE-2020-17159

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.03794EPSS

CVE•added 2021/03/11 4:15 p.m.•83 views

CVE-2021-27060

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00693EPSS

CVE•added 2025/02/11 6:15 p.m.•83 views

CVE-2025-24042

Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability

7.3CVSS7.4AI score0.00088EPSS

CVE•added 2020/11/11 7:15 a.m.•80 views

CVE-2020-17104

Visual Studio Code JSHint Extension Remote Code Execution Vulnerability

9.3CVSS7.9AI score0.04588EPSS

CVE•added 2021/04/13 8:15 p.m.•75 views

CVE-2021-28471

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.02989EPSS

CVE•added 2021/04/13 8:15 p.m.•74 views

CVE-2021-28477

Visual Studio Code Remote Code Execution Vulnerability

7.8CVSS7.1AI score0.01425EPSS

CVE•added 2024/10/08 6:15 p.m.•74 views

CVE-2024-43601

Visual Studio Code for Linux Remote Code Execution Vulnerability

7.8CVSS7.5AI score0.00427EPSS

CVE•added 2025/02/11 6:15 p.m.•72 views

CVE-2025-24039

Visual Studio Code Elevation of Privilege Vulnerability

7.3CVSS7.5AI score0.00426EPSS

CVE•added 2019/03/06 12:0 a.m.•71 views

CVE-2019-0728

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visual Studio Code Remote Code Execution Vulnerability'.

9.3CVSS8.1AI score0.11573EPSS

CVE•added 2021/12/15 3:15 p.m.•71 views

CVE-2021-43908

Visual Studio Code Spoofing Vulnerability

4.3CVSS5AI score0.09451EPSS

CVE•added 2025/03/11 5:16 p.m.•66 views

CVE-2025-26631

Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally.

7.3CVSS7.2AI score0.00239EPSS

CVE•added 2021/03/11 4:15 p.m.•64 views

CVE-2021-27084

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.0641EPSS

CVE•added 2025/05/13 5:15 p.m.•58 views

CVE-2025-21264

Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

7.1CVSS7.3AI score0.00084EPSS

CVE•added 2018/06/26 2:29 p.m.•46 views

CVE-2018-0597

Untrusted search path vulnerability in the installer of Visual Studio Code allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

7.8CVSS7.7AI score0.02342EPSS