Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-59113 | 8.8 high | 1.0% | microsoft, visual_studio_code | Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 24 Oct |
| CVE-2026-69320 | 8.8 high | 1.0% | microsoft, visual_studio_code | Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 24 Oct |
| CVE-2026-70336 | 8.8 high | 1.0% | microsoft, visual_studio_code | Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 24 Oct |
| CVE-2026-96957 | 8.8 high | 1.0% | microsoft, .net, visual_studio_2022, visual_studio_2026 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | 22 Oct |
| CVE-2026-102869 | 8.8 high | 1.0% | no CPE yet | Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. | 19 Oct |
| CVE-2026-69370 | 8.8 high | 1.0% | no CPE yet | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 19 Oct |
| CVE-2026-70098 | 8.8 high | 1.0% | no CPE yet | Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 19 Oct |
| CVE-2026-102235 | 8.8 high | 1.0% | no CPE yet | Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 19 Oct |
| CVE-2026-103572 | 8.8 high | 1.0% | no CPE yet | Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network. | 19 Oct |
| CVE-2026-77934 | 8.7 high | 1.0% | no CPE yet | Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subprocess') to run commands, stealing environment variables, model API keys, and accessing MySQL, MinIO, Redis and etcd. | 20 Oct |
| CVE-2026-76073 | 8.7 high | 1.0% | no CPE yet | Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in label_studio/tasks/api.py declares queryset = Annotation.objects.all() and provides no get_queryset override, so the default lookup retrieves any annotation by primary key. The view's permission_required entries name annotations.view, annotations.change and annotations.delete, and label_studio/core/permissions.py registers every permission with rules.is_authenticated, so the check is satisfied by any logged-in account and no object-level organization test runs. The sibling task endpoint does constrain its queryset with project__organization set to the requester's active organization, which is the boundary this path omits. Annotation identifiers are sequential integers, so an authenticated user of one organization can enumerate identifiers to read, modify and delete annotations belonging to other organizations on the same instance. The same unscoped queryset appears on AnnotationConvertAPI in the same file. | 12 Oct |
| CVE-2026-40501 | 8.6 high | 1.0% | no CPE yet | Cherry Studio versions 1.2.2 through 1.9.12, fixed in commit 1518530, contain a remote code execution vulnerability in SearchService that allows remote attackers to execute arbitrary code by delivering malicious JavaScript through controlled search provider content loaded into an Electron BrowserWindow configured with nodeIntegration enabled and contextIsolation disabled. Attackers who control a search engine provider, individual search result pages, or provider settings pages can execute JavaScript with full Node.js privileges, gaining access to fs, child_process, os, and process.env under the operating-system account of the Cherry Studio process. | 24 Oct |
| CVE-2026-53455 | 8.6 high | 1.0% | no CPE yet | Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio generated a shell-based Git credential helper in custom_components/blueprint_studio/backend/git_manager.py by interpolating the configured Git username and token directly into executable helper script content without validating credential values. An attacker able to set Git credentials could include newline characters or shell syntax in a username or token. When Git executed the generated credential helper, the injected shell commands ran with the operating-system privileges of Home Assistant and could access or modify Home Assistant configuration data. This issue is fixed in version 2.5.2. | 22 Oct |
| CVE-2026-81379 | 8.2 high | 1.0% | microsoft, visual studio code | Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 10 h ago |
| CVE-2026-81378 | 8.2 high | 1.0% | microsoft, visual studio code | Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 10 h ago |
| CVE-2026-81357 | 8.2 high | 1.0% | microsoft, visual studio code | Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 10 h ago |
| CVE-2026-81356 | 8.2 high | 1.0% | microsoft, visual studio code | Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 10 h ago |
| CVE-2026-50528 | 8.2 high | 1.0% | microsoft, .net, visual_studio_2022, visual_studio_2026 | Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network. | Wed 28 Oct |
| CVE-2026-69306 | 8.2 high | 1.0% | microsoft, visual_studio_code | Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 24 Oct |
| CVE-2025-64660 | 8.0 high | 1.0% | microsoft, visual_studio_code | Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network. | 18 Oct |
| CVE-2026-44189 | 7.8 high | 1.0% | no CPE yet | A flaw was found in the Visual Studio Code Ansible Lightspeed extension's AnsiblePlaybookRunProvider. This command injection vulnerability allows an attacker to craft a malicious playbook filename containing special characters. When a victim runs the playbook, these characters are not properly sanitized, leading to the execution of arbitrary code with the privileges of the user running VS Code. This could result in a full system compromise, including the exfiltration of sensitive data, modification of project files, and permanent data loss. | 24 Oct |
| CVE-2026-44190 | 7.8 high | 1.0% | no CPE yet | A flaw was found in the Ansible Lightspeed Visual Studio Code extension. This Command Injection vulnerability (CWE-78) allows a remote attacker to execute unauthorized commands on a user's system. The issue occurs because the `ansible.python.activationScript` setting, intended for a virtual environment activation script, does not properly validate user input as a file path. If a user opens or executes a specially crafted project, an attacker could exploit this to gain complete control over the user's system with the privileges of the Visual Studio Code application. | 24 Oct |
| CVE-2026-44191 | 7.8 high | 1.0% | no CPE yet | A flaw was found in the Visual Studio Code Ansible Lightspeed extension. This command injection vulnerability (CWE-78) arises from improper handling of the ansible.executionEnvironment.containerOptions and ansible.executionEnvironment.volumeMounts settings, allowing an attacker to inject shell separators. This can be triggered automatically during Language Server initialization or manually when executing a playbook. Successful exploitation leads to remote code execution (RCE) on the victim's machine with the privileges of the Visual Studio Code user, potentially resulting in a complete system compromise. | 24 Oct |
| CVE-2022-24513 | 7.8 high | 1.0% | microsoft, visual_studio_2017, visual_studio_2019, visual_studio_2022 | Visual Studio Elevation of Privilege Vulnerability | 23 Oct |
| CVE-2026-62898 | 7.5 high | 1.0% | microsoft, visual_studio_2022, visual_studio_2026, .net | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. | Wed 28 Oct |
| CVE-2026-62901 | 7.5 high | 1.0% | microsoft, visual_studio_2022, visual_studio_2026, .net | Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. | Wed 28 Oct |
| CVE-2026-50651 | 7.5 high | 1.0% | microsoft, .net, visual_studio_2022, visual_studio_2026 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | Wed 28 Oct |
| CVE-2026-50648 | 7.5 high | 1.0% | microsoft, .net_framework, .net, visual_studio_2022 | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network. | Wed 28 Oct |
| CVE-2026-50527 | 7.5 high | 1.0% | microsoft, .net_framework, .net, visual_studio_2022 | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | Wed 28 Oct |
| CVE-2026-50525 | 7.5 high | 1.0% | microsoft, .net_framework, .net, visual_studio_2022 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | Wed 28 Oct |
| CVE-2026-50524 | 7.5 high | 1.0% | microsoft, .net, visual_studio_2022, visual_studio_2026 | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network. | Wed 28 Oct |
| CVE-2026-47302 | 7.5 high | 1.0% | microsoft, .net_framework, .net, visual_studio_2022 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | Wed 28 Oct |
| CVE-2026-50519 | 7.5 high | 1.0% | microsoft, github_copilot_chat | Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. | Sun 25 Oct |
| CVE-2026-67918 | 7.5 high | 1.0% | no CPE yet | Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint | 23 Oct |
| CVE-2025-61590 | 7.5 high | 1.0% | anysphere, cursor | Cursor is a code editor built for programming with AI. Versions 1.6 and below are vulnerable to Remote Code Execution (RCE) attacks through Visual Studio Code Workspaces. Workspaces allow users to open more than a single folder and save specific settings (pretty similar to .vscode/settings.json) for the folders / project. An untitled workspace is automatically created by VS Code (untitled.code-workspace), which contains all the folders and workspace settings from the user's current session, opening up an entire new attack vector if the user has a .code-workspace file in path (either untitled created automatically or a saved one). If an attacker is able to hijack the chat context of the victim (such as via a compromised MCP server), they can use prompt injection to make the Cursor Agent write into this file and modify the workspace. This leads to a bypass of CVE-2025-54130 which can lead to RCE by writing to the settings section. This issue is fixed in version 1.7. | 19 Oct |
| CVE-2026-81383 | 7.4 high | 1.0% | microsoft, visual studio code | Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network. | 9 h ago |
| CVE-2026-78461 | 7.4 high | 1.0% | microsoft, visual studio code | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 10 h ago |
| CVE-2026-96222 | 7.4 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_server_2012 | Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | 22 Oct |
| CVE-2026-102234 | 7.4 high | 1.0% | no CPE yet | Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 19 Oct |
| CVE-2026-62906 | 7.4 high | 1.0% | microsoft, discovery_studio | Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network. | 14 Oct |
| CVE-2022-26921 | 7.3 high | 1.0% | microsoft, visual_studio_code | Visual Studio Code Elevation of Privilege Vulnerability | 8 Oct |
| CVE-2026-14904 | 7.1 high | 1.0% | no CPE yet | AWS Research and Engineering Studio (RES) is an open-source solution that enables researchers and engineers to create and manage secure virtual desktops and computing resources on AWS. Improper link resolution before file access issue (CWE-59) in the Auth.GetUserPrivateKey API. An authenticated remote user could read arbitrary files on the cluster-manager EC2 instance by replacing their SSH private key file (~/.ssh/id_rsa) with a symbolic link targeting any file on the host. Because the cluster-manager process runs as root, any file readable by root is exposed, including other users' SSH private keys and application configuration secrets. It's recommended to upgrade to RES version 2026.06. | Sun 25 Oct |
| CVE-2026-69806 | 7.0 high | 1.0% | microsoft, .net 10.0 runtime, .net 11.0 runtime, .net 9.0 runtime | Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally. | 9 h ago |
| CVE-2025-62613 | 6.9 medium | 1.0% | no CPE yet | VDO.Ninja is a tool that brings remote video feeds into OBS or other studio software via WebRTC. From versions 28.0 to before 28.4, a reflected Cross-Site Scripting (XSS) vulnerability exists on examples/control.html through the room parameter, which is improperly sanitized before being rendered in the DOM. The application fails to validate and encode user input, allowing malicious scripts to be injected and executed. This issue has been patched in version 28.4. | 8 Oct |
| CVE-2026-102229 | 6.8 medium | 1.0% | no CPE yet | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network. | 19 Oct |
| CVE-2025-62214 | 6.7 medium | 1.0% | microsoft, visual_studio_2022 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code locally. | 18 Oct |
| CVE-2026-81381 | 6.5 medium | 1.0% | microsoft, visual studio code | Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. | 10 h ago |
| CVE-2026-81377 | 6.5 medium | 1.0% | microsoft, visual studio code | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network. | 10 h ago |
| CVE-2026-62902 | 6.5 medium | 1.0% | microsoft, visual_studio_2022, visual_studio_2026, .net | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network. | Wed 28 Oct |
| CVE-2026-50659 | 6.5 medium | 1.0% | microsoft, .net_framework, .net, visual_studio_2022 | Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. | Wed 28 Oct |
Download these 200 as CSV · subscribe to this list.
EPSS scores: 2026-10-31. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.