Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-23653 | 6.5 medium | 1.0% | microsoft, github_copilot_chat | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network. | Mon 26 Oct |
| CVE-2026-47282 | 6.5 medium | 1.0% | microsoft, visual_studio_code | Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. | 24 Oct |
| CVE-2026-65675 | 6.5 medium | 1.0% | microsoft, github_copilot_chat | No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network. | 24 Oct |
| CVE-2026-47285 | 6.5 medium | 1.0% | microsoft, visual_studio_code | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network. | 23 Oct |
| CVE-2026-18245 | 6.4 medium | 1.0% | amazon, amplify_codegen_ui | Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote authenticated user to execute arbitrary code in end-user browsers, developer machines, CI/CD environments, and server-side rendering contexts via crafted Studio component or theme schema values due to insufficient coverage and effectiveness of the input validation introduced for CVE-2025-4318. To remediate this issue, users should upgrade to version 2.20.6 | 23 Oct |
| CVE-2026-69304 | 5.9 medium | 1.0% | microsoft, .net 10.0 runtime, .net 8.0 runtime, .net 9.0 runtime | Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 21 h ago |
| CVE-2026-62900 | 5.9 medium | 1.0% | microsoft, visual_studio_2022, visual_studio_2026, .net | Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network. | Wed 28 Oct |
| CVE-2026-62899 | 5.9 medium | 1.0% | microsoft, visual_studio_2022, visual_studio_2026, .net | Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network. | Wed 28 Oct |
| CVE-2026-85790 | 5.9 medium | 1.0% | microsoft, windows_11_23h2, windows_11_24h2, windows_11_25h2 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. | 22 Oct |
| CVE-2026-81380 | 5.3 medium | 1.0% | microsoft, visual studio code | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. | 21 h ago |
| CVE-2026-53457 | 5.1 medium | 1.0% | no CPE yet | Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, the legacy stateless terminal command execution path in custom_components/blueprint_studio/backend/terminal_manager.py accepted a cwd working-directory parameter and checked only whether the directory existed, without requiring it to remain inside the Home Assistant configuration directory. An administrator using the restricted terminal helper could select an existing directory outside the intended configuration boundary. Commands could then access or modify host paths permitted by the Home Assistant container and filesystem permissions, weakening the helper's expected filesystem restriction. This issue is fixed in version 2.5.2. | 22 Oct |
| CVE-2026-41610 | 5.0 medium | 1.0% | microsoft, visual_studio_code | Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Mon 26 Oct |
| CVE-2025-14204 | 2.1 low | 1.0% | no CPE yet | A vulnerability has been found in TykoDev cherry-studio-TykoFork 0.1. This issue affects the function redirectToAuthorization of the file /.well-known/oauth-authorization-server of the component OAuth Server Discovery. Such manipulation of the argument authorizationUrl leads to os command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. | 14 Oct |
| CVE-2026-47304 | 9.8 critical | 0.00% | microsoft, .net_framework, .net, visual_studio_2017 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | Wed 28 Oct |
| CVE-2025-61929 | 9.6 critical | 0.00% | cherry-ai, cherry_studio | Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called `cherrystudio://`. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files `src/main/services/ProtocolClient.ts` and `src/main/services/urlschema/mcp-install.ts`, when receiving a URL of the `cherrystudio://mcp` type, the `handleMcpProtocolUrl` function is called for processing. If an attacker crafts malicious content and posts it on a website or elsewhere (there are many exploitation methods, such as creating a malicious website with a button containing this malicious content), when the user clicks it, since the pop-up window contains normal content, the direct click is considered a scene action, and the malicious command is directly triggered, leading to the user being compromised. As of time of publication, no known patched versions exist. | 8 Oct |
| CVE-2026-80098 | 9.3 critical | 0.00% | microsoft, microsoft copilot studio | Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network. | 21 h ago |
| CVE-2026-57702 | 9.3 critical | 0.00% | no CPE yet | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Melograno Venture Studio Amelia ameliabooking allows Blind SQL Injection.This issue affects Amelia: from n/a through <= 2.4.2. | 24 Oct |
| CVE-2025-11696 | 8.9 high | 0.00% | no CPE yet | A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes. | 18 Oct |
| CVE-2025-11697 | 8.9 high | 0.00% | no CPE yet | A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator privileges on system reboot. | 18 Oct |
| CVE-2026-49483 | 8.9 high | 0.00% | no CPE yet | Code for IBMi is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, IBMi components implementing IBMiComponent were accepted after checking that a procedure existed without reliably verifying component integrity. Components installed with broad public permissions allow another local account to alter a program such as GETMBRINFO. A later connection can execute the altered program under the connecting account because the LONG_COMMENT marker alone does not establish integrity. This issue is fixed in version 3.0.1. | 16 Oct |
| CVE-2026-73222 | 8.8 high | 0.00% | no CPE yet | Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds to all interfaces on port 3444, permits cross-origin requests, and requires no authentication. The POST /api/execute endpoint passes the prompt request-body field to executeLocalTask(), and POST /api/install-agent passes the agentName request-body field to a child process. The same unsafe agent field path is reachable from /api/execute through checkAndInstallAgent(). These attacker-controlled values reach child_process.spawn() with shell execution enabled, causing Node.js to construct a shell command in which metacharacters are interpreted. An attacker who can reach the port directly, or who convinces a developer running Studio to visit a malicious website, can execute arbitrary operating-system commands with the developer's privileges and compromise source code, credentials, and local data. This issue is fixed in version 1.29.4. | 24 Oct |
| CVE-2026-54525 | 8.8 high | 0.00% | no CPE yet | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.28, Markdown Preview Enhanced preview-link handling passes a decoded, Markdown-controlled link target to a Windows file-opening helper that invokes child_process.exec with the start command. When a Windows user opens an untrusted Markdown file and clicks a crafted external or unsupported-scheme link, shell metacharacters in the decoded target are interpreted by cmd.exe as command separators, allowing an attacker-selected command to run with the privileges of the current VS Code user. The attack requires one normal preview-link click but does not require malicious workspace configuration, script execution to be enabled, or additional files. This issue is fixed in version 0.8.28. | 16 Oct |
| CVE-2026-119979 | 8.7 high | 0.00% | element labs, lm studio | LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated traversal filenames. Attackers can trick users into downloading a crafted model repository that plants a plugin manifest.json, install-state.json and mcp-bridge-config.json, running an attacker-supplied Python payload on every launch. | Fri 30 Oct |
| CVE-2026-53453 | 8.7 high | 0.00% | no CPE yet | Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio exposed administrator-intended backend API actions to any authenticated Home Assistant user because the backend did not consistently enforce the panel's admin-only authorization boundary. Affected surfaces included the backend API, upload API, stream routes, terminal WebSocket, Blueprint Studio WebSocket subscriptions, call_service, render_template, global_replace, file and stream access paths, upload handling, and terminal helpers. A non-admin user could invoke arbitrary Home Assistant services, expose Home Assistant state through templates, modify configuration files, access streamed or downloaded configuration content, upload files, or reach terminal-related helpers. These actions could compromise the confidentiality, integrity, and availability of the Home Assistant installation. This issue is fixed in version 2.5.2. | 22 Oct |
| CVE-2026-77935 | 8.7 high | 0.00% | no CPE yet | Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, update_meta, batch_delete, canvas, test_run and nodeDebug routes to read, run, overwrite or delete workflows. | 20 Oct |
| CVE-2025-9437 | 8.7 high | 0.00% | no CPE yet | A security issue exists within the Studio 5000 Logix Designer add-on profile (AOP) for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model (COM) methods. | 8 Oct |
| CVE-2019-25276 | 8.5 high | 0.00% | rockwellautomation, studio | Studio 5000 Logix Designer 30.01.00 contains an unquoted service path vulnerability in the FactoryTalk Activation Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\ to inject malicious code that would execute with LocalSystem permissions. | Tue 27 Oct |
| CVE-2026-12715 | 8.5 high | 0.00% | no CPE yet | Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no customer action is needed. | 24 Oct |
| CVE-2026-54566 | 8.5 high | 0.00% | no CPE yet | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.29, Markdown Preview Enhanced evaluates repository-controlled .crossnote/config.js and .crossnote/parser.js files with vm.runInNewContext, which does not provide a security boundary from the Node.js host realm. Opening a Markdown file in a malicious repository automatically loads these files, and prototype-chain traversal can reach the host Function constructor and process object, allowing operating-system commands to execute as the victim account without further interaction. Both configuration evaluation and parser-hook evaluation are affected, and the attack does not depend on module-scoped require being available. This issue is fixed in version 0.8.29. | 16 Oct |
| CVE-2026-50520 | 8.4 high | 0.00% | microsoft, visual_studio_code | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally. | 24 Oct |
| CVE-2025-58775 | 8.4 high | 0.00% | no CPE yet | KV STUDIO and VT5-WX15/WX12 contain a stack-based buffer overflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product. | 18 Oct |
| CVE-2025-58776 | 8.4 high | 0.00% | no CPE yet | KV Studio versions 12.23 and prior contain a stack-based buffer overflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product. | 12 Oct |
| CVE-2025-59845 | 8.2 high | 0.00% | no CPE yet | Apollo Studio Embeddable Explorer & Embeddable Sandbox are website embeddable software solutions from Apollo GraphQL. Prior to Apollo Sandbox version 2.7.2 and Apollo Explorer version 3.7.3, a cross-site request forgery (CSRF) vulnerability was identified. The vulnerability arises from missing origin validation in the client-side code that handles window.postMessage events. A malicious website can send forged messages to the embedding page, causing the victim’s browser to execute arbitrary GraphQL queries or mutations against their GraphQL server while authenticated with the victim’s cookies. This issue has been patched in Apollo Sandbox version 2.7.2 and Apollo Explorer version 3.7.3. | 9 Oct |
| CVE-2026-70334 | 7.8 high | 0.00% | microsoft, visual studio code | Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 21 h ago |
| CVE-2026-70354 | 7.8 high | 0.00% | microsoft, visual_studio_2022, visual_studio_2026, .net_framework | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | Wed 28 Oct |
| CVE-2026-62886 | 7.8 high | 0.00% | microsoft, visual_studio_2022, visual_studio_2026, .net | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. | Wed 28 Oct |
| CVE-2026-62871 | 7.8 high | 0.00% | microsoft, .net, visual_studio_2022, visual_studio_2026 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | Wed 28 Oct |
| CVE-2026-62909 | 7.8 high | 0.00% | microsoft, visual_studio_2022, visual_studio_2026, .net | Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. | Wed 28 Oct |
| CVE-2026-47305 | 7.8 high | 0.00% | microsoft, microsoft visual studio 2022 version 17.12, microsoft visual studio 2022 version 17.14, microsoft visual studio 2026 version 18.7 | Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally. | Wed 28 Oct |
| CVE-2026-60625 | 7.8 high | 0.00% | oracle, data_integrator | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Studio). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Data Integrator executes to compromise Oracle Data Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Data Integrator. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). | 24 Oct |
| CVE-2026-54981 | 7.8 high | 0.00% | microsoft, python | Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally. | 24 Oct |
| CVE-2026-58650 | 7.8 high | 0.00% | microsoft, visual_studio_code | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 24 Oct |
| CVE-2026-69278 | 7.8 high | 0.00% | microsoft, visual_studio_code | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 24 Oct |
| CVE-2026-70335 | 7.8 high | 0.00% | microsoft, visual_studio_code | Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally. | 24 Oct |
| CVE-2026-102233 | 7.8 high | 0.00% | no CPE yet | Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 19 Oct |
| CVE-2026-102231 | 7.7 high | 0.00% | microsoft, visual_studio_code | Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Tue 27 Oct |
| CVE-2026-69805 | 7.5 high | 0.00% | microsoft, microsoft visual studio 2022 version 17.14, microsoft visual studio 2026 version 18.9, microsoft.diagnostics.runtime | External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network. | 21 h ago |
| CVE-2025-64530 | 7.5 high | 0.00% | no CPE yet | Apollo Federation is an architecture for declaratively composing APIs into a unified graph. A vulnerability in versions of Apollo Federation's composition logic prior to 2.9.5, 2.10.4, 2.11.5, and 2.12.1 allowed some queries to Apollo Router to improperly bypass access controls on types/fields. Apollo Federation incorrectly allowed user-defined access control directives on interface types/fields, which could be bypassed by instead querying the implementing object types/fields in Apollo Router via inline fragments, for example. A fix to versions 2.9.5, 2.10.4, 2.11.5, and 2.12.1 of composition logic in Federation now disallows interfaces types and fields to contain user-defined access control directives. Some workarounds are available. Users of Apollo Rover with an unpatched composition version or are using the Apollo Studio build pipeline with Federation version 2.8 or below should manually copy the access control requirements on interface types/fields to each implementing object type/field where appropriate. Do not remove those access control requirements from the interface types/fields, as unpatched Apollo Composition will not automatically generate them in the supergraph schema. Customers not using Apollo Router access control features (`@authenticated`, `@requiresScopes`, or `@policy` directives) or not specifying access control requirements on interface types/fields are not affected and do not need to take action. | 18 Oct |
| CVE-2026-118147 | 7.4 high | — | microsoft, microsoft visual studio 2017 version 15.9, microsoft visual studio 2019 version 16.11, microsoft visual studio 2022 version 17.14 | Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network. | 19 h ago |
| CVE-2026-62848 | 7.3 high | 0.00% | metalama | Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023.0.101-rc until 2025.1.18, 2026.0.25 and 2026.1.19, the Windows Visual Studio integration deserializes local named-pipe messages without restricting which CLR types can be instantiated. The pipe connects `devenv`, the out-of-process Roslyn code-analysis process and the `CodeLens` process, and has the predictable name `Metalama_{role}_{processId}_{hash(PackageVersion)}`. Releases from the first public 2023.0 line through 2026.0.x use Newtonsoft.Json with `TypeNameHandling.All`; the later `SerializationBinder` only remaps assembly names, and `BindToType` resolves arbitrary wire-supplied types without an allow-list. Releases 2026.1.0 through 2026.1.18 use typeless MessagePack with `TypelessObjectResolver` and likewise instantiate arbitrary types. A same-user local process able to write to the pipe can send crafted messages that lead to arbitrary code execution with confidentiality, integrity and availability impacts inside the affected Visual Studio process. Default Windows pipe ACLs limit writers to the same logged-in user, so this does not escalate privileges or cross a security boundary; command-line and MSBuild-only builds do not use the channel. The maintained Metalama + PostSharp extension is affected from 2024.1 through 2026.1.4, while earlier Metalama-free PostSharp versions are unaffected. The retired Metalama and Caravela extensions remain affected and require removal or migration. The framework issue is fixed in versions 2025.1.18, 2026.0.25 and 2026.1.19; the maintained Metalama + PostSharp Visual Studio extension is fixed in version 2026.1.5. The retired Metalama and Caravela extensions require removal or migration. | Fri 30 Oct |
Download these 200 as CSV · subscribe to this list.
EPSS scores: 2026-10-31. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.