Skip to content
OpenAdvisories

Product · Microsoft

Visual Studio Code

92 known vulnerabilities.

18 results · Clear filters · Feed

  • Medium 6.1

    Visual Studio Code Security Feature Bypass Vulnerability

    Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.

  • Medium 6.8

    Visual Studio Code Information Disclosure Vulnerability

    Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.

  • Medium 6.5

    GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

    Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  • Medium 5.3

    GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  • Medium 6.5

    Visual Studio Code Tampering Vulnerability

    Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.

  • Medium 6.5

    Visual Studio Code Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  • Medium 5.5

    Visual Studio Code Security Feature Bypass Vulnerability

    Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  • Medium 6.5

    GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

    Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  • Medium 6.5

    Visual Studio Code Information Disclosure Vulnerability

    Exposure of sensitive information to an unauthorized actor in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  • Medium 6.5

    Visual Studio Code Tampering Vulnerability

    Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.

  • Medium 6.3

    Visual Studio Code Security Feature Bypass Vulnerability

    Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  • Medium 5.0

    GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

    Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature locally.

  • Medium 6.8

    Visual Studio Code Elevation of Privilege Vulnerability

    Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally.

  • Medium 6.6

    Visual Studio Code Spoofing Vulnerability

    Visual Studio Code Spoofing Vulnerability

  • Medium 6.6

    Visual Studio Code Spoofing Vulnerability

    Visual Studio Code Spoofing Vulnerability

  • Medium 6.1

    Visual Studio Code Spoofing Vulnerability

    Visual Studio Code Spoofing Vulnerability

  • Medium 4.3
    CVE-2021-43908 Public exploit

    Visual Studio Code Spoofing Vulnerability

    Visual Studio Code Spoofing Vulnerability

  • Medium 5.5

    Visual Studio Code Spoofing Vulnerability

    Visual Studio Code Spoofing Vulnerability