9 matches found
CVE-2022-24526
CVE-2022-24526 is a Visual Studio Code vulnerability described as Spoofing. Connected sources confirm a UI spoofing flaw in VS Code, with exploitation not detailed in the initial entry but reflected in multiple accompanying advisories. The vulnerability is tied to VS Code and has remediation refe...
CVE-2023-33144
CVE-2023-33144 affects Visual Studio Code (older than 1.79.1) and is described as a session spoofing vulnerability. The Nessus/plugin text states an attacker could exploit to perform actions with the privileges of another user, implying a local-authentication bypass related to how VS Code handles...
CVE-2023-29338
CVE-2023-29338 is a Visual Studio Code information-disclosure spoofing vulnerability on Windows, enabling local attackers with user interaction to access sensitive data via spoofing vectors. Root cause is a spoofing flaw in VS Code (affected versions include 1.78.0 and earlier per FreeBSD VuXML e...
CVE-2025-32726
CVE-2025-32726 describes an improper access-control flaw in Visual Studio Code that enables an authorized local attacker to elevate privileges. The entry is supported by multiple sources (NVD, RH, OSV, CIRCL, MSRC) confirming the core issue as a local privilege-escalation in VS Code. CVSS v3.1 me...
CVE-2026-41610
Technical details about CVE-2026-41610 are not publicly available in the provided documents. Monitor for updates from official sources (e.g., vendor advisories, CVE records) for affected products, remediation steps, or confirmed exploit information.
CVE-2026-47285
CVE-2026-47285 describes an information-disclosure vulnerability in Visual Studio Code due to improper neutralization of special elements used in a command (command injection). The NVD entry and CVE records state that an unauthorized attacker could disclose information over a network. The CVSS 3....
CVE-2026-47287
CVE-2026-47287 affects Visual Studio Code. The provided documents describe a relative path traversal vulnerability that could allow tampering over a network. Per CVSS data, the attack vector is NETWORK with no privileges required but user interaction is required, and the impact includes high inte...
CVE-2026-47282
Summary: CVE-2026-47282 concerns insufficiently protected credentials in GitHub Copilot and Visual Studio Code, leading to potential information disclosure over a network. Impact and scope (as per metrics): CVSS 3.1 base score 6.5 (Medium); attack vector: NETWORK; attack complexity: LOW; privileg...