Export limit exceeded: 17720 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (118 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-102233 | 1 Microsoft | 1 Visual Studio Code | 2026-10-16 | 7.8 High |
| Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | ||||
| CVE-2026-102231 | 1 Microsoft | 1 Visual Studio Code | 2026-10-16 | 7.7 High |
| Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | ||||
| CVE-2026-102234 | 1 Microsoft | 1 Visual Studio Code | 2026-10-16 | 7.4 High |
| Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-102232 | 1 Microsoft | 1 Visual Studio Code | 2026-10-16 | 7 High |
| Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | ||||
| CVE-2026-102229 | 1 Microsoft | 1 Visual Studio Code | 2026-10-16 | 6.8 Medium |
| Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-102851 | 1 Microsoft | 1 Visual Studio Code | 2026-10-14 | 6.1 Medium |
| Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally. | ||||
| CVE-2026-69370 | 1 Microsoft | 1 Visual Studio Code | 2026-10-14 | 8.8 High |
| Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-102238 | 1 Microsoft | 1 Visual Studio Code | 2026-10-14 | 9.6 Critical |
| Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-70098 | 1 Microsoft | 1 Visual Studio Code | 2026-10-13 | 8.8 High |
| Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-102235 | 1 Microsoft | 1 Visual Studio Code | 2026-10-13 | 8.8 High |
| Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-81380 | 1 Microsoft | 1 Visual Studio Code | 2026-09-23 | 5.3 Medium |
| Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-81381 | 1 Microsoft | 1 Visual Studio Code | 2026-09-15 | 6.5 Medium |
| Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-78462 | 1 Microsoft | 1 Visual Studio Code | 2026-09-11 | 8.8 High |
| Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-81379 | 1 Microsoft | 1 Visual Studio Code | 2026-09-11 | 8.2 High |
| Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-81378 | 1 Microsoft | 1 Visual Studio Code | 2026-09-11 | 8.2 High |
| Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-81377 | 1 Microsoft | 1 Visual Studio Code | 2026-09-11 | 6.5 Medium |
| Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network. | ||||
| CVE-2026-81376 | 1 Microsoft | 1 Visual Studio Code | 2026-09-11 | 9.6 Critical |
| Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-81357 | 1 Microsoft | 1 Visual Studio Code | 2026-09-11 | 8.2 High |
| Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-81356 | 1 Microsoft | 1 Visual Studio Code | 2026-09-11 | 8.2 High |
| Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-78461 | 1 Microsoft | 1 Visual Studio Code | 2026-09-11 | 7.4 High |
| Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | ||||