Known vulnerabilities in Visual Studio Code 1.7.2

Vendor: Microsoft
Version: 1.7.2
Software CPE: cpe:2.3:a:microsoft:vscode:*:*:*:*:*:*:*:*
Total vulnerabilities: 33
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Visual Studio Code version 1.7.2 Visual Studio Code 1.7.2 is affected by 33 vulnerabilities: 1 critical, 11 high, 12 medium, 9 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138173 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-57102
CWE-829 Medium
No
No
1.128.1 17.07.2026 SB2026071709
#VU138172 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-57101
CWE-79 Medium
No
No
1.128.1 17.07.2026 SB2026071709
#VU138171 - Command injection
CVE-2026-50520
CWE-77 Low
No
No
1.128.1 17.07.2026 SB2026071709
#VU138170 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-45496
CWE-22 Low
No
No
1.128.1 17.07.2026 SB2026071709
#VU138169 - Insufficiently Protected Credentials
CVE-2026-47282
CWE-522 Medium
No
No
1.128.1 17.07.2026 SB2026071709
#VU134268 - Exposure of sensitive information to an unauthorized actor
CVE-2026-47284
CWE-200 Medium
No
No
1.123.2 10.06.2026 SB20260610110
#VU134267 - Improper input validation
CVE-2026-47281
CWE-20 High
No
No
1.123.2 10.06.2026 SB20260610110
#VU134265 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-47287
CWE-22 Medium
No
No
1.123.2 10.06.2026 SB20260610110
#VU131298 - Session Fixation
CVE-2026-41613
CWE-384 High
No
No
1.119.1 13.05.2026 SB2026051309
#VU122626 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-21523
CWE-367 Medium
No
No
1.109.1 10.02.2026 SB20260210107
#VU122622 - Command injection
CVE-2026-21518
CWE-77 High
No
No
1.109.1 10.02.2026 SB20260210107
#VU115179 - Command injection
CVE-2025-55319
CWE-77 High
No
No
1.104.0 12.09.2025 SB2025091211
#VU109143 - Files or Directories Accessible to External Parties
CVE-2025-21264
CWE-552 Low
No
No
1.100.1 13.05.2025 SB20250513124
#VU107398 - Improper Access Control
CVE-2025-32726
CWE-284 Low
No
No
1.99.1 12.04.2025 SB2025041203
#VU107292 - Improper Access Control
CVE-2025-20570
CWE-284 Low
No
No
1.99.1 09.04.2025 SB2025040960
#VU103827 - Improper Access Control
CVE-2025-24042
CWE-284 Low
No
No
1.97.1 11.02.2025 SB20250211129
#VU103818 - Uncontrolled Search Path Element
CVE-2025-24039
CWE-427 Low
No
No
1.97.1 11.02.2025 SB20250211120
#VU98264 - Command injection
CVE-2024-43601
CWE-77 Medium
No
No
1.94.1 09.10.2024 SB2024100925
#VU87450 - Permissions, Privileges, and Access Controls
CVE-2024-26165
CWE-264 Medium
No
No
1.87.2 12.03.2024 SB20240312336
#VU81244 - Heap-based Buffer Overflow
CVE-2023-5217
CWE-122 Critical
Public exploit available
Exploited
1.82.3 27.09.2023 SB2023092804
SB2023092847
SB2023092851
and 101 more


Showing elements 1 - 20 out of 33