Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2021-43891exploit | 7.8 high | 13.0% | microsoft, visual_studio_code | Visual Studio Code Remote Code Execution Vulnerability | 8 Oct |
| CVE-2021-43908exploit | 4.3 medium | 3.0% | microsoft, visual_studio_code | Visual Studio Code Spoofing Vulnerability | 8 Oct |
| CVE-2025-62222exploit | 8.8 high | 1.0% | microsoft, github_copilot_chat | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network. | 18 Oct |
| CVE-2022-21991 | 8.1 high | 2.0% | microsoft, visual_studio_code | Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability | 8 Oct |
| CVE-2026-102238 | 9.6 critical | 1.0% | no CPE yet | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 19 Oct |
| CVE-2026-41109 | 8.8 high | 1.0% | microsoft, visual_studio_code | Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network. | Mon 26 Oct |
| CVE-2026-41613 | 8.8 high | 1.0% | microsoft, visual_studio_code | Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2026-12856 | 8.8 high | 1.0% | redhat, openshift_dev_spaces | A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code. The extension incorrectly trusts all Markdown content in JavaDoc hovers, allowing a malicious Java file to include hidden commands. If a user clicks a specially crafted link within a JavaDoc hover popup, an attacker can execute arbitrary VS Code commands, which can lead to full system compromise in trusted workspaces. | Sun 25 Oct |
| CVE-2026-57102 | 8.8 high | 1.0% | microsoft, visual_studio_code | Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | Sat 24 Oct |
| CVE-2026-59113 | 8.8 high | 1.0% | microsoft, visual_studio_code | Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. | Sat 24 Oct |
| CVE-2026-69320 | 8.8 high | 1.0% | microsoft, visual_studio_code | Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. | Sat 24 Oct |
| CVE-2026-70336 | 8.8 high | 1.0% | microsoft, visual_studio_code | Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. | Sat 24 Oct |
| CVE-2026-69370 | 8.8 high | 1.0% | no CPE yet | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 19 Oct |
| CVE-2026-70098 | 8.8 high | 1.0% | no CPE yet | Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 19 Oct |
| CVE-2026-102235 | 8.8 high | 1.0% | no CPE yet | Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 19 Oct |
| CVE-2026-69306 | 8.2 high | 1.0% | microsoft, visual_studio_code | Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | Sat 24 Oct |
| CVE-2025-64660 | 8.0 high | 1.0% | microsoft, visual_studio_code | Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network. | 18 Oct |
| CVE-2026-44189 | 7.8 high | 1.0% | no CPE yet | A flaw was found in the Visual Studio Code Ansible Lightspeed extension's AnsiblePlaybookRunProvider. This command injection vulnerability allows an attacker to craft a malicious playbook filename containing special characters. When a victim runs the playbook, these characters are not properly sanitized, leading to the execution of arbitrary code with the privileges of the user running VS Code. This could result in a full system compromise, including the exfiltration of sensitive data, modification of project files, and permanent data loss. | Sat 24 Oct |
| CVE-2026-44190 | 7.8 high | 1.0% | no CPE yet | A flaw was found in the Ansible Lightspeed Visual Studio Code extension. This Command Injection vulnerability (CWE-78) allows a remote attacker to execute unauthorized commands on a user's system. The issue occurs because the `ansible.python.activationScript` setting, intended for a virtual environment activation script, does not properly validate user input as a file path. If a user opens or executes a specially crafted project, an attacker could exploit this to gain complete control over the user's system with the privileges of the Visual Studio Code application. | Sat 24 Oct |
| CVE-2026-44191 | 7.8 high | 1.0% | no CPE yet | A flaw was found in the Visual Studio Code Ansible Lightspeed extension. This command injection vulnerability (CWE-78) arises from improper handling of the ansible.executionEnvironment.containerOptions and ansible.executionEnvironment.volumeMounts settings, allowing an attacker to inject shell separators. This can be triggered automatically during Language Server initialization or manually when executing a playbook. Successful exploitation leads to remote code execution (RCE) on the victim's machine with the privileges of the Visual Studio Code user, potentially resulting in a complete system compromise. | Sat 24 Oct |
| CVE-2026-50519 | 7.5 high | 1.0% | microsoft, github_copilot_chat | Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. | Sun 25 Oct |
| CVE-2025-61590 | 7.5 high | 1.0% | anysphere, cursor | Cursor is a code editor built for programming with AI. Versions 1.6 and below are vulnerable to Remote Code Execution (RCE) attacks through Visual Studio Code Workspaces. Workspaces allow users to open more than a single folder and save specific settings (pretty similar to .vscode/settings.json) for the folders / project. An untitled workspace is automatically created by VS Code (untitled.code-workspace), which contains all the folders and workspace settings from the user's current session, opening up an entire new attack vector if the user has a .code-workspace file in path (either untitled created automatically or a saved one). If an attacker is able to hijack the chat context of the victim (such as via a compromised MCP server), they can use prompt injection to make the Cursor Agent write into this file and modify the workspace. This leads to a bypass of CVE-2025-54130 which can lead to RCE by writing to the settings section. This issue is fixed in version 1.7. | 19 Oct |
| CVE-2026-102234 | 7.4 high | 1.0% | no CPE yet | Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 19 Oct |
| CVE-2022-26921 | 7.3 high | 1.0% | microsoft, visual_studio_code | Visual Studio Code Elevation of Privilege Vulnerability | 8 Oct |
| CVE-2026-102229 | 6.8 medium | 1.0% | no CPE yet | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network. | 19 Oct |
| CVE-2026-23653 | 6.5 medium | 1.0% | microsoft, github_copilot_chat | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network. | Mon 26 Oct |
| CVE-2026-47282 | 6.5 medium | 1.0% | microsoft, visual_studio_code | Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. | Sat 24 Oct |
| CVE-2026-65675 | 6.5 medium | 1.0% | microsoft, github_copilot_chat | No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network. | Sat 24 Oct |
| CVE-2026-47285 | 6.5 medium | 1.0% | microsoft, visual_studio_code | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network. | Fri 23 Oct |
| CVE-2026-41610 | 5.0 medium | 1.0% | microsoft, visual_studio_code | Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Mon 26 Oct |
| CVE-2026-49483 | 8.9 high | 0.00% | no CPE yet | Code for IBMi is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, IBMi components implementing IBMiComponent were accepted after checking that a procedure existed without reliably verifying component integrity. Components installed with broad public permissions allow another local account to alter a program such as GETMBRINFO. A later connection can execute the altered program under the connecting account because the LONG_COMMENT marker alone does not establish integrity. This issue is fixed in version 3.0.1. | 16 Oct |
| CVE-2026-54525 | 8.8 high | 0.00% | no CPE yet | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.28, Markdown Preview Enhanced preview-link handling passes a decoded, Markdown-controlled link target to a Windows file-opening helper that invokes child_process.exec with the start command. When a Windows user opens an untrusted Markdown file and clicks a crafted external or unsupported-scheme link, shell metacharacters in the decoded target are interpreted by cmd.exe as command separators, allowing an attacker-selected command to run with the privileges of the current VS Code user. The attack requires one normal preview-link click but does not require malicious workspace configuration, script execution to be enabled, or additional files. This issue is fixed in version 0.8.28. | 16 Oct |
| CVE-2026-54566 | 8.5 high | 0.00% | no CPE yet | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.29, Markdown Preview Enhanced evaluates repository-controlled .crossnote/config.js and .crossnote/parser.js files with vm.runInNewContext, which does not provide a security boundary from the Node.js host realm. Opening a Markdown file in a malicious repository automatically loads these files, and prototype-chain traversal can reach the host Function constructor and process object, allowing operating-system commands to execute as the victim account without further interaction. Both configuration evaluation and parser-hook evaluation are affected, and the attack does not depend on module-scoped require being available. This issue is fixed in version 0.8.29. | 16 Oct |
| CVE-2026-50520 | 8.4 high | 0.00% | microsoft, visual_studio_code | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally. | Sat 24 Oct |
| CVE-2026-54981 | 7.8 high | 0.00% | microsoft, python | Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally. | Sat 24 Oct |
| CVE-2026-58650 | 7.8 high | 0.00% | microsoft, visual_studio_code | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Sat 24 Oct |
| CVE-2026-69278 | 7.8 high | 0.00% | microsoft, visual_studio_code | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Sat 24 Oct |
| CVE-2026-70335 | 7.8 high | 0.00% | microsoft, visual_studio_code | Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally. | Sat 24 Oct |
| CVE-2026-102233 | 7.8 high | 0.00% | no CPE yet | Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 19 Oct |
| CVE-2026-102231 | 7.7 high | 0.00% | microsoft, visual_studio_code | Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Tue 27 Oct |
| CVE-2026-54702 | 7.3 high | 0.00% | no CPE yet | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, constructs a command in the _crossnote namespace, and invokes vscode.commands.executeCommand without an allowlist or type validation. JavaScript already executing in the preview webview can use this bridge to invoke privileged extension commands, including file modification, code-chunk execution, export-tool execution, and arbitrary URL opening, with attacker-selected arguments. Exploitation requires a separate webview JavaScript execution path, such as the independently tracked .crossnote/head.html injection, but no further authorization check protects the extension-host command boundary. This issue is fixed in version 0.8.30. | 16 Oct |
| CVE-2026-102232 | 7.0 high | 0.00% | no CPE yet | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 19 Oct |
| CVE-2026-54701 | 6.9 medium | 0.00% | no CPE yet | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, Markdown Preview Enhanced reads repository-controlled .crossnote/head.html content and passes it through resolvePathsInHeader before inserting it into the head of the preview webview document without removing executable content. Script-capable markup executes while the document loads, before the React application and DOMPurify initialize, and can access acquireVsCodeApi to send messages from the webview to the extension host. Opening a Markdown preview in a malicious repository is sufficient to trigger the injected content, and no additional click within the notification or preview is required. This issue is fixed in version 0.8.30. | 20 Oct |
| CVE-2025-62449 | 6.8 medium | 0.00% | microsoft, github_copilot_chat | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally. | 18 Oct |
| CVE-2026-57101 | 6.1 medium | 0.00% | microsoft, visual_studio_code | Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Sat 24 Oct |
| CVE-2026-102851 | 6.1 medium | 0.00% | no CPE yet | Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally. | 19 Oct |
| CVE-2026-54703 | 5.8 medium | 0.00% | no CPE yet | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the _crossnote.updateMarkdown command in Markdown Preview Enhanced accepts an arbitrary URI and attacker-controlled content, then passes them to vscode.workspace.fs.writeFile without validating that the target is the Markdown file represented by the current preview. JavaScript already executing in the preview webview can invoke this command through the extension message bridge and write any file permitted by the VS Code user's operating-system privileges, including user configuration, startup, source, and build files. This file-write vulnerability requires a separate webview JavaScript execution path, such as the independently tracked head.html injection and blind command-dispatch weaknesses. This issue is fixed in version 0.8.30. | 16 Oct |
| CVE-2026-41612 | 5.5 medium | 0.00% | microsoft, live_preview | Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally. | Mon 26 Oct |
| CVE-2026-45496 | 5.5 medium | 0.00% | microsoft, visual_studio_code | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Sat 24 Oct |
| CVE-2025-68120 | 5.4 medium | 0.00% | go | To prevent unexpected untrusted code execution, the Visual Studio Code Go extension is now disabled in Restricted Mode. | 13 Oct |
50 of 54 · Next
Download these 54 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.