Microsoft Visual Studio Code vulnerabilities
99 vulnerabilities
Known vulnerabilities in Microsoft Visual Studio Code, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-69370microsoftvisual studio code
EPSS score0.70%
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.CVE-2026-102851microsoftvisual studio codeEPSS score0.26%
Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.CVE-2026-102233microsoftvisual studio codeEPSS score0.42%
Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.CVE-2026-102232microsoftvisual studio codeEPSS score0.33%
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.CVE-2026-102231microsoftvisual studio codeEPSS score0.38%
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.CVE-2026-102229microsoftvisual studio codeEPSS score0.93%
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.CVE-2026-70098microsoftvisual studio codeEPSS score0.41%
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.CVE-2026-102238microsoftvisual studio codeEPSS score0.65%
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.CVE-2026-102235microsoftvisual studio codeEPSS score0.56%
Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.CVE-2026-102234microsoftvisual studio codeEPSS score0.64%
Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.CVE-2018-0597microsoftthe installer of visual studio code+1EPSS score5.63%
Untrusted search path vulnerability in the installer of Visual Studio Code allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2021-1639microsoftmicrosoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)+6EPSS score2.11%
Visual Studio Code Remote Code Execution VulnerabilityCVE-2021-26437microsoftvisual studio codeEPSS score2.33%
Visual Studio Code Spoofing VulnerabilityCVE-2021-42322microsoftvisual studio codeEPSS score0.54%
Visual Studio Code Elevation of Privilege VulnerabilityCVE-2021-31214microsoftvisual studio codeEPSS score2.91%
Visual Studio Code Remote Code Execution VulnerabilityCVE-2021-31211microsoftvisual studio codeEPSS score2.52%
Visual Studio Code Remote Code Execution VulnerabilityCVE-2021-43891microsoftvisual studio codeEPSS score13.85%
Visual Studio Code Remote Code Execution VulnerabilityCVE-2021-43908microsoftvisual studio codeEPSS score2.84%
Visual Studio Code Spoofing VulnerabilityCVE-2021-27060microsoftvisual studio codeEPSS score3.16%
Visual Studio Code Remote Code Execution VulnerabilityCVE-2021-28475microsoftvisual studio codeEPSS score2.71%
Visual Studio Code Remote Code Execution Vulnerability