CVE-20XX-?

Microsoft Visual Studio Code CVEs.

Published CVEs affecting Microsoft Visual Studio Code, ranked by exploit odds.

7 CVEs · updated 2026-11-06 08:39 UTC

Reset all
  1. CVE-2026-47281

    Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

    Auth & access Microsoft Visual Studio Code

    9.6 CRITICAL 0.8% exploit odds Fix listed
  2. CVE-2026-59113

    Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

    Auth & access Microsoft Visual Studio Code

    8.8 HIGH 0.8% exploit odds Fix listed
  3. CVE-2026-78462

    Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

    Auth & access Microsoft Visual Studio Code

    8.8 HIGH 0.8% exploit odds Fix listed
  4. CVE-2025-24042

    Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability

    Auth & access Microsoft Visual Studio Code

    7.3 HIGH 0.7% exploit odds Fix listed
  5. CVE-2025-64660

    Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network.

    Auth & access Microsoft Visual Studio Code

    8.0 HIGH 0.6% exploit odds Fix listed
  6. CVE-2025-32726

    Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally.

    Auth & access Microsoft Visual Studio Code

    6.8 MEDIUM 0.5% exploit odds Fix listed
  7. CVE-2026-58650

    Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

    Auth & access Microsoft Visual Studio Code

    7.8 HIGH 0.3% exploit odds Fix listed

All CVEs affecting Microsoft Visual Studio Code that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.