Microsoft Visual Studio Code vulnerabilities
87 known vulnerabilities affecting microsoft/visual_studio_code.
Total CVEs
87
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL4HIGH65MEDIUM17LOW1
Vulnerabilities
Page 3 of 5
CVE-2026-70334P3HIGHCVSS 7.8fixed in 1.136.2≥ 1.0.0, < 1.136.22026-09-08
CVE-2026-70334 [HIGH] CWE-184 CVE-2026-70334: Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass
Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2021-34529P3HIGHCVSS 7.8fixed in 1.57.1≥ 1.0.0, < 1.57.12021-07-14
CVE-2021-34529 [HIGH] CVE-2021-34529: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-28471P3HIGHCVSS 7.8fixed in 1.55.2≥ 1.0.0, < publication2021-04-13
CVE-2021-28471 [HIGH] CVE-2021-28471: Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2020-17148P3HIGHCVSS 7.8fixed in 0.61.02020-12-10
CVE-2020-17148 [HIGH] CVE-2020-17148: Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability
Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability
nvd
CVE-2020-17104P3HIGHCVSS 7.8≥ 1.0.0, < publication2020-11-11
CVE-2020-17104 [HIGH] CVE-2020-17104: Visual Studio Code JSHint Extension Remote Code Execution Vulnerability
Visual Studio Code JSHint Extension Remote Code Execution Vulnerability
nvd
CVE-2026-47285P3MEDIUMCVSS 6.5fixed in 1.132.1≥ 1.0.0, < 1.132.12026-08-11
CVE-2026-47285 [MEDIUM] CWE-77 CVE-2026-47285: Improper neutralization of special elements used in a command ('command injection') in Visual Studio
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2021-27060P3HIGHCVSS 7.8≥ 1.0.0, < publication2021-03-11
CVE-2021-27060 [HIGH] CVE-2021-27060: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-34528P3HIGHCVSS 7.8fixed in 1.58.1≥ 1.0.0, < 1.582021-07-14
CVE-2021-34528 [HIGH] CVE-2021-34528: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-31214P3HIGHCVSS 7.8fixed in 1.56.1≥ 1.0.0, < 1.562021-05-11
CVE-2021-31214 [HIGH] CVE-2021-31214: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2026-81377P3MEDIUMCVSS 6.5fixed in 1.136.2≥ 1.0.0, < 1.136.22026-09-08
CVE-2026-81377 [MEDIUM] CWE-22 CVE-2026-81377: Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.
nvd
CVE-2021-28457P3HIGHCVSS 7.8fixed in 1.55.2≥ 1.0.0, < publication2021-04-13
CVE-2021-28457 [HIGH] CVE-2021-28457: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-28473P3HIGHCVSS 7.8fixed in 1.55.2≥ 1.0.0, < publication2021-04-13
CVE-2021-28473 [HIGH] CVE-2021-28473: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-28475P3HIGHCVSS 7.8fixed in 1.55.2≥ 1.0.0, < publication2021-04-13
CVE-2021-28475 [HIGH] CVE-2021-28475: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-28469P3HIGHCVSS 7.8fixed in 1.55.2≥ 1.0.0, < publication2021-04-13
CVE-2021-28469 [HIGH] CVE-2021-28469: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-31211P3HIGHCVSS 7.8fixed in 1.56.1≥ 1.0.0, < 1.562021-05-11
CVE-2021-31211 [HIGH] CVE-2021-31211: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-28477P3HIGHCVSS 7.8fixed in 1.55.2≥ 1.0.0, < publication2021-04-13
CVE-2021-28477 [HIGH] CVE-2021-28477: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2023-21779P3HIGHCVSS 7.8fixed in 1.74.3≥ 1.0.0, < 1.74.32023-01-10
CVE-2023-21779 [HIGH] CWE-502 CVE-2023-21779: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2021-1639P3HIGHCVSS 7.8≥ 1.0.0, < publication2021-02-25
CVE-2021-1639 [HIGH] CVE-2021-1639: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd
CVE-2026-81380P3MEDIUMCVSS 5.9fixed in 1.136.2≥ 1.0.0, < 1.136.22026-09-08
CVE-2026-81380 [MEDIUM] CWE-77 CVE-2026-81380: Improper neutralization of special elements used in a command ('command injection') in GitHub Copilo
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2023-36742P3HIGHCVSS 7.8fixed in 1.82.1≥ 1.0.0, < 1.82.12023-09-12
CVE-2023-36742 [HIGH] CVE-2023-36742: Visual Studio Code Remote Code Execution Vulnerability
Visual Studio Code Remote Code Execution Vulnerability
nvd