Microsoft Visual Studio Code vulnerabilities
67 known vulnerabilities affecting microsoft/visual_studio_code.
Total CVEs
67
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH49MEDIUM14LOW1
Vulnerabilities
Page 2 of 4
CVE-2026-45482P3HIGHCVSS 8.4fixed in 1.123.22026-06-09
CVE-2026-45482 [HIGH] CWE-22 CVE-2026-45482: Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and
Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2020-16881P3HIGHCVSS 7.8fixed in 1.48.1≥ 1.0.0, < publication2020-09-11
CVE-2020-16881 [HIGH] CVE-2020-16881: <p>A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into op
A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the aff
nvd
CVE-2020-17023P3HIGHCVSS 7.8≥ 1.0.0, < publication2020-10-16
CVE-2020-17023 [HIGH] CVE-2020-17023: <p>A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into op
A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the aff
nvd
CVE-2026-47292P3HIGHCVSS 7.8≥ 1.0.0, < 1.123.12026-06-09
CVE-2026-47292 [HIGH] CWE-94 CVE-2026-47292: Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorize
Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2021-28471P3HIGHCVSS 7.8fixed in 1.55.2≥ 1.0.0, < publication2021-04-13
CVE-2021-28471 [HIGH] CVE-2021-28471: Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-34529P3HIGHCVSS 7.8fixed in 1.57.1≥ 1.0.0, < 1.57.12021-07-14
CVE-2021-34529 [HIGH] CVE-2021-34529: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2020-17148P3HIGHCVSS 7.8fixed in 0.61.02020-12-10
CVE-2020-17148 [HIGH] CVE-2020-17148: Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability
Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability
nvd
CVE-2020-17104P3HIGHCVSS 7.8≥ 1.0.0, < publication2020-11-11
CVE-2020-17104 [HIGH] CVE-2020-17104: Visual Studio Code JSHint Extension Remote Code Execution Vulnerability
Visual Studio Code JSHint Extension Remote Code Execution Vulnerability
nvd
CVE-2021-31214P3HIGHCVSS 7.8fixed in 1.56.1≥ 1.0.0, < 1.562021-05-11
CVE-2021-31214 [HIGH] CVE-2021-31214: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-27060P3HIGHCVSS 7.8≥ 1.0.0, < publication2021-03-11
CVE-2021-27060 [HIGH] CVE-2021-27060: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-34528P3HIGHCVSS 7.8fixed in 1.58.1≥ 1.0.0, < 1.582021-07-14
CVE-2021-34528 [HIGH] CVE-2021-34528: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-28457P3HIGHCVSS 7.8fixed in 1.55.2≥ 1.0.0, < publication2021-04-13
CVE-2021-28457 [HIGH] CVE-2021-28457: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-28473P3HIGHCVSS 7.8fixed in 1.55.2≥ 1.0.0, < publication2021-04-13
CVE-2021-28473 [HIGH] CVE-2021-28473: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-28475P3HIGHCVSS 7.8fixed in 1.55.2≥ 1.0.0, < publication2021-04-13
CVE-2021-28475 [HIGH] CVE-2021-28475: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-28469P3HIGHCVSS 7.8fixed in 1.55.2≥ 1.0.0, < publication2021-04-13
CVE-2021-28469 [HIGH] CVE-2021-28469: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-31211P3HIGHCVSS 7.8fixed in 1.56.1≥ 1.0.0, < 1.562021-05-11
CVE-2021-31211 [HIGH] CVE-2021-31211: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-28477P3HIGHCVSS 7.8fixed in 1.55.2≥ 1.0.0, < publication2021-04-13
CVE-2021-28477 [HIGH] CVE-2021-28477: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2023-21779P3HIGHCVSS 7.8fixed in 1.74.3≥ 1.0.0, < 1.74.32023-01-10
CVE-2023-21779 [HIGH] CWE-502 CVE-2023-21779: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2023-36742P3HIGHCVSS 7.8fixed in 1.82.1≥ 1.0.0, < 1.82.12023-09-12
CVE-2023-36742 [HIGH] CVE-2023-36742: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-1639P3HIGHCVSS 7.8≥ 1.0.0, < publication2021-02-25
CVE-2021-1639 [HIGH] CVE-2021-1639: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd