Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-54525 | 8.8 high | 0.00% | no CPE yet | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.28, Markdown Preview Enhanced preview-link handling passes a decoded, Markdown-controlled link target to a Windows file-opening helper that invokes child_process.exec with the start command. When a Windows user opens an untrusted Markdown file and clicks a crafted external or unsupported-scheme link, shell metacharacters in the decoded target are interpreted by cmd.exe as command separators, allowing an attacker-selected command to run with the privileges of the current VS Code user. The attack requires one normal preview-link click but does not require malicious workspace configuration, script execution to be enabled, or additional files. This issue is fixed in version 0.8.28. | 16 Oct |
| CVE-2026-54566 | 8.5 high | 0.00% | no CPE yet | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.29, Markdown Preview Enhanced evaluates repository-controlled .crossnote/config.js and .crossnote/parser.js files with vm.runInNewContext, which does not provide a security boundary from the Node.js host realm. Opening a Markdown file in a malicious repository automatically loads these files, and prototype-chain traversal can reach the host Function constructor and process object, allowing operating-system commands to execute as the victim account without further interaction. Both configuration evaluation and parser-hook evaluation are affected, and the attack does not depend on module-scoped require being available. This issue is fixed in version 0.8.29. | 16 Oct |
| CVE-2026-50520 | 8.4 high | 0.00% | microsoft, visual_studio_code | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally. | Sat 24 Oct |
| CVE-2026-70334 | 7.8 high | 0.00% | microsoft, visual studio code | Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 3 h ago |
| CVE-2026-70354 | 7.8 high | 0.00% | microsoft, visual_studio_2022, visual_studio_2026, .net_framework | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | Wed 28 Oct |
| CVE-2026-62871 | 7.8 high | 0.00% | microsoft, .net, visual_studio_2022, visual_studio_2026 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | Wed 28 Oct |
| CVE-2026-47305 | 7.8 high | 0.00% | microsoft, microsoft visual studio 2022 version 17.12, microsoft visual studio 2022 version 17.14, microsoft visual studio 2026 version 18.7 | Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally. | Wed 28 Oct |
| CVE-2026-54981 | 7.8 high | 0.00% | microsoft, python | Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally. | 24 Oct |
| CVE-2026-58650 | 7.8 high | 0.00% | microsoft, visual_studio_code | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 24 Oct |
| CVE-2026-69278 | 7.8 high | 0.00% | microsoft, visual_studio_code | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 24 Oct |
| CVE-2026-70335 | 7.8 high | 0.00% | microsoft, visual_studio_code | Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally. | 24 Oct |
| CVE-2026-102233 | 7.8 high | 0.00% | no CPE yet | Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 19 Oct |
| CVE-2026-102231 | 7.7 high | 0.00% | microsoft, visual_studio_code | Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Tue 27 Oct |
| CVE-2026-62848 | 7.3 high | — | metalama | Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023.0.101-rc until 2025.1.18, 2026.0.25 and 2026.1.19, the Windows Visual Studio integration deserializes local named-pipe messages without restricting which CLR types can be instantiated. The pipe connects `devenv`, the out-of-process Roslyn code-analysis process and the `CodeLens` process, and has the predictable name `Metalama_{role}_{processId}_{hash(PackageVersion)}`. Releases from the first public 2023.0 line through 2026.0.x use Newtonsoft.Json with `TypeNameHandling.All`; the later `SerializationBinder` only remaps assembly names, and `BindToType` resolves arbitrary wire-supplied types without an allow-list. Releases 2026.1.0 through 2026.1.18 use typeless MessagePack with `TypelessObjectResolver` and likewise instantiate arbitrary types. A same-user local process able to write to the pipe can send crafted messages that lead to arbitrary code execution with confidentiality, integrity and availability impacts inside the affected Visual Studio process. Default Windows pipe ACLs limit writers to the same logged-in user, so this does not escalate privileges or cross a security boundary; command-line and MSBuild-only builds do not use the channel. The maintained Metalama + PostSharp extension is affected from 2024.1 through 2026.1.4, while earlier Metalama-free PostSharp versions are unaffected. The retired Metalama and Caravela extensions remain affected and require removal or migration. The framework issue is fixed in versions 2025.1.18, 2026.0.25 and 2026.1.19; the maintained Metalama + PostSharp Visual Studio extension is fixed in version 2026.1.5. The retired Metalama and Caravela extensions require removal or migration. | 23 h ago |
| CVE-2026-54702 | 7.3 high | 0.00% | no CPE yet | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, constructs a command in the _crossnote namespace, and invokes vscode.commands.executeCommand without an allowlist or type validation. JavaScript already executing in the preview webview can use this bridge to invoke privileged extension commands, including file modification, code-chunk execution, export-tool execution, and arbitrary URL opening, with attacker-selected arguments. Exploitation requires a separate webview JavaScript execution path, such as the independently tracked .crossnote/head.html injection, but no further authorization check protects the extension-host command boundary. This issue is fixed in version 0.8.30. | 16 Oct |
| CVE-2026-62897 | 7.0 high | 0.00% | microsoft, .net_framework, visual_studio_2022, visual_studio_2026 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. | Wed 28 Oct |
| CVE-2026-102232 | 7.0 high | 0.00% | no CPE yet | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 19 Oct |
| CVE-2026-54701 | 6.9 medium | 0.00% | no CPE yet | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, Markdown Preview Enhanced reads repository-controlled .crossnote/head.html content and passes it through resolvePathsInHeader before inserting it into the head of the preview webview document without removing executable content. Script-capable markup executes while the document loads, before the React application and DOMPurify initialize, and can access acquireVsCodeApi to send messages from the webview to the extension host. Opening a Markdown preview in a malicious repository is sufficient to trigger the injected content, and no additional click within the notification or preview is required. This issue is fixed in version 0.8.30. | 20 Oct |
| CVE-2025-62449 | 6.8 medium | 0.00% | microsoft, github_copilot_chat | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally. | 18 Oct |
| CVE-2026-57101 | 6.1 medium | 0.00% | microsoft, visual_studio_code | Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Sat 24 Oct |
| CVE-2026-102851 | 6.1 medium | 0.00% | no CPE yet | Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally. | 19 Oct |
| CVE-2026-54703 | 5.8 medium | 0.00% | no CPE yet | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the _crossnote.updateMarkdown command in Markdown Preview Enhanced accepts an arbitrary URI and attacker-controlled content, then passes them to vscode.workspace.fs.writeFile without validating that the target is the Markdown file represented by the current preview. JavaScript already executing in the preview webview can invoke this command through the extension message bridge and write any file permitted by the VS Code user's operating-system privileges, including user configuration, startup, source, and build files. This file-write vulnerability requires a separate webview JavaScript execution path, such as the independently tracked head.html injection and blind command-dispatch weaknesses. This issue is fixed in version 0.8.30. | 16 Oct |
| CVE-2026-41612 | 5.5 medium | 0.00% | microsoft, live_preview | Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally. | Mon 26 Oct |
| CVE-2026-45496 | 5.5 medium | 0.00% | microsoft, visual_studio_code | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Sat 24 Oct |
| CVE-2025-68120 | 5.4 medium | 0.00% | go | To prevent unexpected untrusted code execution, the Visual Studio Code Go extension is now disabled in Restricted Mode. | 13 Oct |
| CVE-2026-49484 | 5.1 medium | 0.00% | no CPE yet | Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, src/ui/views/objectBrowser.ts stores Object Browser downloads and the edit-save flow content in the shared /tmp directory without reliable cleanup. On systems where /tmp is accessible to other local accounts, file contents remain readable after download or editing operations. This issue is fixed in version 3.0.1. | 16 Oct |
| CVE-2025-62453 | 5.0 medium | 0.00% | microsoft, visual_studio_code | Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature locally. | 18 Oct |
| CVE-2026-41611 | 3.3 low | 0.00% | microsoft, visual_studio_code | Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally. | Mon 26 Oct |
| CVE-2026-44187 | 3.3 low | 0.00% | no CPE yet | A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text within the user's configuration file and writes it to output log files. This information disclosure can lead to the attacker obtaining the API credential and potentially consuming the user's API quota. | 24 Oct |
79 of 79 · Previous
Download these 79 as CSV · subscribe to this list.
EPSS scores: 2026-10-30. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.