Vulnerabilidades do Microsoft Visual Studio Code

CVE-2026-47284 Média · 6.5 CWE-200 09/06/2026

Visual Studio Code Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

CVE-2026-47281 Crítica · 9.6 CWE-306 09/06/2026

Visual Studio Code Elevation of Privilege Vulnerability

Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-45482 Alta · 8.4 CWE-22 09/06/2026

Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-40376 Alta · 8.1 CWE-20 09/06/2026

Visual Studio Code Elevation of Privilege Vulnerability

Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-41613 Alta · 8.8 CWE-384 12/05/2026

Visual Studio Code Elevation of Privilege Vulnerability

Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-41611 Baixa · 3.3 CWE-79 12/05/2026

Visual Studio Code Remote Code Execution Vulnerability

Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally.

CVE-2026-41610 Média · 5.0 CWE-79 12/05/2026

Visual Studio Code Security Feature Bypass Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-41109 Alta · 8.8 CWE-74 12/05/2026

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-21523 Alta · 8.0 CWE-367 10/02/2026

GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability

Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network.

CVE-2026-21518 Alta · 8.8 CWE-77 10/02/2026

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

CVE-2025-64660 Alta · 8.0 CWE-284 20/11/2025

GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability

Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network.

CVE-2025-62453 Média · 5.0 CWE-693 11/11/2025

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature locally.

CVE-2022-26921 Alta · 7.3 15/04/2022

Visual Studio Code Elevation of Privilege Vulnerability

CVE-2022-21991 Alta · 8.1 09/02/2022

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

CVE-2021-43908 Média · 4.3 15/12/2021

Visual Studio Code Spoofing Vulnerability

CVE-2021-43891 Alta · 7.8 15/12/2021

Visual Studio Code Remote Code Execution Vulnerability