Microsoft Visual Studio Code
92 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-102851 | 1.0.0 – < 1.141.1 | Visual Studio Code Security Feature Bypass Vulnerability | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-69370 | 1.0.0 – < 1.141.1 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-70098 | 1.0.0 – < 1.141.1 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 8.8 | 0.6 % | ||
| CVE-2026-102238 | 1.0.0 – < 1.141.1 | Visual Studio Code Remote Code Execution Vulnerability | CRITICAL 9.6 | 0.8 % | ||
| CVE-2026-102235 | 1.0.0 – < 1.141.1 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 8.8 | 0.7 % | ||
| CVE-2026-102234 | 1.0.0 – < 1.141.1 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 7.4 | 0.8 % | ||
| CVE-2026-102233 | 1.0.0 – < 1.141.1 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2026-102232 | 1.0.0 – < 1.141.1 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 7.0 | 0.3 % | ||
| CVE-2026-102231 | 1.0.0 – < 1.141.1 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 7.7 | 0.4 % | ||
| CVE-2026-102229 | 1.0.0 – < 1.141.1 | Visual Studio Code Information Disclosure Vulnerability | MEDIUM 6.8 | 1.1 % | ||
| CVE-2026-81383 | 1.0.0 – < 1.136.2 | Visual Studio Code Information Disclosure Vulnerability | HIGH 7.4 | 0.9 % | ||
| CVE-2026-78462 | 1.0.0 – < 1.136.2 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-81381 | 1.0.0 – < 1.136.2 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | HIGH 7.5 | 0.9 % | ||
| CVE-2026-81380 | 1.0.0 – < 1.136.2 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | MEDIUM 5.9 | 0.7 % | ||
| CVE-2026-81379 | 1.0.0 – < 1.136.2 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 8.2 | 0.5 % | ||
| CVE-2026-81378 | 1.0.0 – < 1.136.2 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 8.2 | 0.5 % | ||
| CVE-2026-81377 | 1.0.0 – < 1.136.2 | Visual Studio Code Tampering Vulnerability | MEDIUM 6.5 | 0.8 % | ||
| CVE-2026-81376 | 1.0.0 – < 1.136.2 | Visual Studio Code Security Feature Bypass Vulnerability | CRITICAL 9.6 | 0.9 % | ||
| CVE-2026-81357 | 1.0.0 – < 1.136.2 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 8.2 | 0.5 % | ||
| CVE-2026-81356 | 1.0.0 – < 1.136.2 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 8.2 | 0.5 % | ||
| CVE-2026-78461 | 1.0.0 – < 1.136.2 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 7.4 | 1.0 % | ||
| CVE-2026-70334 | 1.0.0 – < 1.136.2 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 7.8 | 0.5 % | ||
| CVE-2026-70336 | 1.0.0 – < 1.132.1 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-70335 | 1.0.0 – < 1.132.1 | GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability | HIGH 7.8 | 0.5 % | ||
| CVE-2026-69306 | 1.0.0 – < 1.132.1 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 8.2 | 0.5 % | ||
| CVE-2026-69320 | 1.0.0 – < 1.132.1 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-69278 | 1.0.0 – < 1.132.1 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2026-47285 | 1.0.0 – < 1.132.1 | Visual Studio Code Information Disclosure Vulnerability | MEDIUM 6.5 | 0.9 % | ||
| CVE-2026-59113 | 1.0.0 – < 1.132.1 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-58650 | 1.0.0 – < 1.132.1 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2026-57102 | 1.0.0 – < 1.128.1 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2026-57101 | 1.0.0 – < 1.128.1 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 7.1 | 0.5 % | ||
| CVE-2026-50520 | 1.0.0 – < 1.128.1 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 8.4 | 0.4 % | ||
| CVE-2026-47282 | 1.0.0 – < 1.128.1 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | MEDIUM 6.5 | 0.9 % | ||
| CVE-2026-45496 | 1.0.0 – < 1.128.1 | Visual Studio Code Security Feature Bypass Vulnerability | MEDIUM 5.5 | 0.5 % | ||
| CVE-2026-48569 | 1.0.0 – < 1.123.2 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 7.1 | 0.4 % | ||
| CVE-2026-47284 | 1.0.0 – < 1.123.2 | Visual Studio Code Information Disclosure Vulnerability | MEDIUM 6.5 | 1.0 % | ||
| CVE-2026-47281 | 1.0.0 – < 1.123.2 | Visual Studio Code Elevation of Privilege Vulnerability | CRITICAL 9.6 | 0.8 % | ||
| CVE-2026-40376 | 1.0.0 – < 1.123.2 | Visual Studio Code Elevation of Privilege Vulnerability | HIGH 8.1 | 0.7 % | ||
| CVE-2026-47287 | 1.0.0 – < 1.123.2 | Visual Studio Code Tampering Vulnerability | MEDIUM 6.5 | 0.8 % | ||
| CVE-2026-41613 | 1.0.0 – < 1.119.1 | Visual Studio Code Elevation of Privilege Vulnerability | HIGH 8.8 | 0.5 % | ||
| CVE-2026-41611 | 1.0.0 – < 1.119.1 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2026-41610 | 1.0.0 – < 1.119.1 | Visual Studio Code Security Feature Bypass Vulnerability | MEDIUM 6.3 | 0.6 % | ||
| CVE-2026-41109 | 1.0.0 – < 1.128.1 | GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-21523 | 1.0.0 – < 1.110.1 | GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability | HIGH 8.0 | 0.8 % | ||
| CVE-2026-21518 | 1.0.0 – < 1.110.1 | GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2025-64660 | 1.0.0 – < 1.106.2 | GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability | HIGH 8.0 | 0.6 % | ||
| CVE-2025-62453 | 1.0.0 – < 1.105.0 | GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability | MEDIUM 5.0 | 0.4 % | ||
| CVE-2025-55319 | 1.0.0 – < 1.104.0 | Agentic AI and Visual Studio Code Remote Code Execution Vulnerability | CRITICAL 9.8 | 1.0 % | ||
| CVE-2025-21264 | 1.0.0 – < 1.100.1 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH 7.1 | 0.8 % | ||
| CVE-2025-32726 | 1.0.0 – < 1.99.1 | Visual Studio Code Elevation of Privilege Vulnerability | MEDIUM 6.8 | 0.5 % | ||
| CVE-2025-26631 | 1.0.0 – < 1.98.0 | Visual Studio Code Elevation of Privilege Vulnerability | HIGH 7.3 | 0.6 % | ||
| CVE-2025-24039 | 1.0.0 – < 1.97.1 | Visual Studio Code Elevation of Privilege Vulnerability | HIGH 7.3 | 0.7 % | ||
| CVE-2024-43488 | - | Visual Studio Code extension for Arduino Remote Code Execution Vulnerability | CRITICAL 9.8 | 1.2 % | ||
| CVE-2024-26165 | 1.0.0 – < 1.87.2 | Visual Studio Code Elevation of Privilege Vulnerability | HIGH 8.8 | 1.9 % | ||
| CVE-2023-36742 | 1.0.0 – < 1.82.1 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 1.0 % | ||
| CVE-2023-33144 | 1.0.0 – < 1.79 | Visual Studio Code Spoofing Vulnerability | MEDIUM 6.6 | 1.3 % | ||
| CVE-2023-29338 | 1.0.0 – < 1.78.1 | Visual Studio Code Spoofing Vulnerability | MEDIUM 6.6 | 0.9 % | ||
| CVE-2023-24893 | 1.0.0 – < 1.77.0 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 1.1 % | ||
| CVE-2023-21779 | 1.0.0 – < 1.74.3 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 2.3 % | ||
| CVE-2022-41042 | 1.0.0 – < 1.72.1 | Visual Studio Code Information Disclosure Vulnerability | HIGH 7.4 | 2.5 % | ||
| CVE-2022-41034 | 1.0.0 – < 1.72.1 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 67 % | ||
| CVE-2022-38020 | 1.0.0 – < 1.71.1 | Visual Studio Code Elevation of Privilege Vulnerability | HIGH 7.3 | 1.1 % | ||
| CVE-2022-30129 | 1.0.0 – < 1.67.1 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 8.8 | 41 % | ||
| CVE-2022-26921 | 1.0.0 – < 1.66.2 | Visual Studio Code Elevation of Privilege Vulnerability | HIGH 7.8 | 0.6 % | ||
| CVE-2022-24526 | 1.0.0 – < 1.65.1 | Visual Studio Code Spoofing Vulnerability | MEDIUM 6.1 | 1.6 % | ||
| CVE-2022-21991 | 1.0.0 – < 1.64.1 | Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability | HIGH 8.1 | 2.1 % | ||
| CVE-2021-43908 | 1.0.0 – < 1.63.1 | Visual Studio Code Spoofing Vulnerability | MEDIUM 4.3 | 2.8 % | ||
| CVE-2021-43891 | 1.0.0 – < 1.63.1 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 13 % | ||
| CVE-2021-42322 | 1.0.0 – < 1.62.1 | Visual Studio Code Elevation of Privilege Vulnerability | HIGH 7.8 | 0.5 % | ||
| CVE-2021-26437 | 1.0.0 – < 1.59.1 | Visual Studio Code Spoofing Vulnerability | MEDIUM 5.5 | 2.3 % | ||
| CVE-2021-34529 | 1.0.0 – < 1.57.1 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 5.1 % | ||
| CVE-2021-34528 | 1.0.0 – < 1.58 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 3.1 % | ||
| CVE-2021-34479 | 1.0.0 – < 1.58 | Microsoft Visual Studio Spoofing Vulnerability | HIGH 7.8 | 3.4 % | ||
| CVE-2021-31214 | 1.0.0 – < 1.56 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 2.9 % | ||
| CVE-2021-31211 | 1.0.0 – < 1.56 | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 2.5 % | ||
| CVE-2021-28477 | 1.0.0 – < publication | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 2.3 % | ||
| CVE-2021-28475 | 1.0.0 – < publication | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 2.7 % | ||
| CVE-2021-28473 | 1.0.0 – < publication | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 2.7 % | ||
| CVE-2021-28471 | 1.0.0 – < publication | Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 4.1 % | ||
| CVE-2021-28469 | 1.0.0 – < publication | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 2.7 % | ||
| CVE-2021-28457 | 1.0.0 – < publication | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 2.7 % | ||
| CVE-2021-27060 | 1.0.0 – < publication | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 3.2 % | ||
| CVE-2021-1639 | 1.0.0 – < publication | Visual Studio Code Remote Code Execution Vulnerability | HIGH 7.8 | 2.1 % | ||
| CVE-2020-17104 | 1.0.0 – < publication | Visual Studio Code JSHint Extension Remote Code Execution Vulnerability | HIGH 7.8 | 3.8 % | ||
| CVE-2020-17023 | 1.0.0 – < publication | Visual Studio JSON Remote Code Execution Vulnerability | HIGH 7.8 | 4.6 % | ||
| CVE-2020-16881 | 1.0.0 – < publication | Visual Studio JSON Remote Code Execution Vulnerability | HIGH 7.8 | 5.4 % | ||
| CVE-2020-0604 | 1.0.0 – < publication | Visual Studio Code Remote Code Execution Vulnerability | HIGH 8.8 | 3.6 % | ||
| CVE-2020-1416 | unspecified | An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Stu | HIGH 8.8 | 5.9 % | ||
| CVE-2020-1192 | 1.0.0 – < publication | Visual Studio Code Python Extension Remote Code Execution Vulnerability | HIGH 7.8 | 4.3 % | ||
| CVE-2019-1414 | unspecified | An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to users of a local computer, aka 'Vis | HIGH 7.8 | 1.1 % | ||
| CVE-2019-0728 | unspecified | A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visua | HIGH 7.8 | 28 % |