Vulnerabilidades do Microsoft Visual Studio Code

CVE-2026-70098 Alta · 8.8 CWE-862 13/10/2026

Visual Studio Code Remote Code Execution Vulnerability

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

CVE-2026-102238 Crítica · 9.6 CWE-22 13/10/2026

Visual Studio Code Remote Code Execution Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

CVE-2026-102235 Alta · 8.8 CWE-116 13/10/2026

Visual Studio Code Remote Code Execution Vulnerability

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

CVE-2026-102234 Alta · 7.4 CWE-807 13/10/2026

Visual Studio Code Security Feature Bypass Vulnerability

Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-69370 Alta · 8.8 CWE-77 13/10/2026

Visual Studio Code Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

CVE-2026-102851 Média · 6.1 CWE-266 13/10/2026

Visual Studio Code Security Feature Bypass Vulnerability

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.

CVE-2026-102233 Alta · 7.8 CWE-862 13/10/2026

Visual Studio Code Security Feature Bypass Vulnerability

Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-102232 Alta · 7.0 CWE-863 13/10/2026

Visual Studio Code Security Feature Bypass Vulnerability

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-102231 Alta · 7.7 CWE-41 13/10/2026

Visual Studio Code Security Feature Bypass Vulnerability

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-102229 Média · 6.8 CWE-22 13/10/2026

Visual Studio Code Information Disclosure Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.

CVE-2026-81383 Alta · 7.4 CWE-706 08/09/2026

Visual Studio Code Information Disclosure Vulnerability

Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

CVE-2026-78462 Alta · 8.8 CWE-639 08/09/2026

Visual Studio Code Security Feature Bypass Vulnerability

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-81381 Média · 6.5 CWE-522 08/09/2026

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

CVE-2026-81380 Média · 5.3 CWE-77 08/09/2026

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

CVE-2026-81379 Alta · 8.2 CWE-636 08/09/2026

Visual Studio Code Security Feature Bypass Vulnerability

Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-81378 Alta · 8.2 CWE-436 08/09/2026

Visual Studio Code Security Feature Bypass Vulnerability

Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-81377 Média · 6.5 CWE-22 08/09/2026

Visual Studio Code Tampering Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.

CVE-2026-81376 Crítica · 9.6 CWE-1023 08/09/2026

Visual Studio Code Security Feature Bypass Vulnerability

Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-81357 Alta · 8.2 CWE-918 08/09/2026

Visual Studio Code Security Feature Bypass Vulnerability

Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-81356 Alta · 8.2 CWE-444 08/09/2026

Visual Studio Code Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-78461 Alta · 7.4 CWE-22 08/09/2026

Visual Studio Code Security Feature Bypass Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-70334 Alta · 7.8 CWE-184 08/09/2026

Visual Studio Code Security Feature Bypass Vulnerability

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-48569 Média · 5.5 CWE-20 09/06/2026

Visual Studio Code Security Feature Bypass Vulnerability

Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-47292 Alta · 7.8 CWE-94 09/06/2026

Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

CVE-2026-47287 Média · 6.5 CWE-23 09/06/2026

Visual Studio Code Tampering Vulnerability

Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.