Product · Microsoft

Visual Studio Code

111 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

83 results · Clear filters · Feed

High 8.4

CVE-2026-50520

Visual Studio Code Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.

Microsoft Visual Studio Code

Jul 14, 2026
High 7.1

CVE-2026-48569

Visual Studio Code Security Feature Bypass Vulnerability

Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Microsoft Visual Studio Code

Jun 9, 2026
High 7.5

CVE-2026-40376

Visual Studio Code Elevation of Privilege Vulnerability

Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

Microsoft Visual Studio Code

Jun 9, 2026
High 8.8

CVE-2026-41613

Visual Studio Code Elevation of Privilege Vulnerability

Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

Microsoft Visual Studio Code

May 12, 2026
High 7.8

CVE-2026-41611

Visual Studio Code Remote Code Execution Vulnerability

Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally.

Microsoft Visual Studio Code

May 12, 2026
High 8.8

CVE-2026-41109

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network.

Microsoft Visual Studio Code

May 12, 2026
High 8.0

CVE-2026-21523

GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability

Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network.

Microsoft Visual Studio Code Microsoft Visual Studio Code CoPilot Chat Extension

Feb 10, 2026
High 8.8

CVE-2026-21518

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Microsoft Visual Studio Code Microsoft Visual Studio Code CoPilot Chat Extension

Feb 10, 2026
High 8.0

CVE-2025-64660

GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability

Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network.

Microsoft Visual Studio Code

Nov 20, 2025
High 8.8

CVE-2025-55319 Public exploit

Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network.

Microsoft Visual Studio Code

Sep 12, 2025
High 7.1

CVE-2025-21264

Visual Studio Code Security Feature Bypass Vulnerability

Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Microsoft Visual Studio Code Microsoft Visual Studio Code CoPilot Chat Extension

May 13, 2025
High 7.3

CVE-2025-26631

Visual Studio Code Elevation of Privilege Vulnerability

Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally.

Microsoft Visual Studio Code

Mar 11, 2025
High 7.3

CVE-2025-24039

Visual Studio Code Elevation of Privilege Vulnerability

Visual Studio Code Elevation of Privilege Vulnerability

Microsoft Visual Studio Code

Feb 11, 2025
High 8.8

CVE-2024-43488

Visual Studio Code extension for Arduino Remote Code Execution Vulnerability

Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.

Microsoft Visual Studio Code

Oct 8, 2024
High 8.8

CVE-2024-26165

Visual Studio Code Elevation of Privilege Vulnerability

Visual Studio Code Elevation of Privilege Vulnerability

Microsoft Visual Studio Code

Mar 12, 2024
High 7.8

CVE-2023-36742

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Sep 12, 2023
High 7.8

CVE-2023-24893

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 11, 2023
High 7.8

CVE-2023-21779

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Jan 10, 2023
High 7.4

CVE-2022-41042

Visual Studio Code Information Disclosure Vulnerability

Visual Studio Code Information Disclosure Vulnerability

Microsoft Visual Studio Code

Oct 11, 2022
High 7.8

CVE-2022-41034 Public exploit EPSS 67%

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Oct 11, 2022
High 7.3

CVE-2022-38020

Visual Studio Code Elevation of Privilege Vulnerability

Visual Studio Code Elevation of Privilege Vulnerability

Microsoft Visual Studio Code

Sep 13, 2022
High 8.8

CVE-2022-30129 Public exploit EPSS 42%

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

May 10, 2022
High 7.3

CVE-2022-26921

Visual Studio Code Elevation of Privilege Vulnerability

Visual Studio Code Elevation of Privilege Vulnerability

Microsoft Visual Studio Code

Apr 15, 2022
High 8.1

CVE-2022-21991

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Feb 9, 2022
High 7.8

CVE-2021-43891 Public exploit EPSS 12%

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Dec 15, 2021
High 7.8

CVE-2021-42322

Visual Studio Code Elevation of Privilege Vulnerability

Visual Studio Code Elevation of Privilege Vulnerability

Microsoft Visual Studio Code

Nov 10, 2021
High 7.8

CVE-2021-34529

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Jul 14, 2021
High 7.8

CVE-2021-34528

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Jul 14, 2021
High 7.8

CVE-2021-34479

Microsoft Visual Studio Spoofing Vulnerability

Microsoft Visual Studio Spoofing Vulnerability

Microsoft Visual Studio Code

Jul 14, 2021
High 7.8

CVE-2021-31214

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

May 11, 2021
High 7.8

CVE-2021-31211

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

May 11, 2021
High 7.8

CVE-2021-28475

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.0

CVE-2021-28477

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.8

CVE-2021-28473

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.8

CVE-2021-28471

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.8

CVE-2021-28469

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.8

CVE-2021-28457

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.8

CVE-2021-27060

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Mar 11, 2021
High 7.0

CVE-2021-1639

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)

Feb 25, 2021
High 7.8

CVE-2020-17104

Visual Studio Code JSHint Extension Remote Code Execution Vulnerability

Visual Studio Code JSHint Extension Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Nov 11, 2020