CVE-20XX-?

Microsoft Visual Studio Code CVEs.

Published CVEs affecting Microsoft Visual Studio Code, ranked by exploit odds.

2 CVEs · updated 2026-11-06 08:54 UTC

Reset all
  1. CVE-2026-41610

    Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

    XSS Microsoft Visual Studio Code

    6.3 MEDIUM 0.6% exploit odds Fix listed
  2. CVE-2026-57101

    Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

    XSS Microsoft Visual Studio Code

    7.1 HIGH 0.5% exploit odds Fix listed

All CVEs affecting Microsoft Visual Studio Code that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.