Known vulnerabilities in Visual Studio Code 1.33.0 - page 2

Vendor: Microsoft
Version: 1.33.0
Software CPE: cpe:2.3:a:microsoft:vscode:*:*:*:*:*:*:*:*
Total vulnerabilities: 42
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Visual Studio Code version 1.33.0 Visual Studio Code 1.33.0 is affected by 42 vulnerabilities: 1 critical, 18 high, 13 medium, 10 low Critical High Medium Low

Vulnerabilities (42)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109143 - Files or Directories Accessible to External Parties
CVE-2025-21264
CWE-552 Low
No
No
1.100.1 13.05.2025 SB20250513124
#VU107398 - Improper Access Control
CVE-2025-32726
CWE-284 Low
No
No
1.99.1 12.04.2025 SB2025041203
#VU107292 - Improper Access Control
CVE-2025-20570
CWE-284 Low
No
No
1.99.1 09.04.2025 SB2025040960
#VU103827 - Improper Access Control
CVE-2025-24042
CWE-284 Low
No
No
1.97.1 11.02.2025 SB20250211129
#VU103818 - Uncontrolled Search Path Element
CVE-2025-24039
CWE-427 Low
No
No
1.97.1 11.02.2025 SB20250211120
#VU98264 - Command injection
CVE-2024-43601
CWE-77 Medium
No
No
1.94.1 09.10.2024 SB2024100925
#VU87450 - Permissions, Privileges, and Access Controls
CVE-2024-26165
CWE-264 Medium
No
No
1.87.2 12.03.2024 SB20240312336
#VU81244 - Heap-based Buffer Overflow
CVE-2023-5217
CWE-122 Critical
Public exploit available
Exploited
1.82.3 27.09.2023 SB2023092804
SB2023092847
SB2023092851
and 101 more
#VU80729 - Improper input validation
CVE-2023-36742
CWE-20 High
No
No
1.82.1 13.09.2023 SB2023091324
#VU80728 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39956
CWE-94 Medium
No
No
1.80.2 13.09.2023 SB2023091322
SB2023091323
#VU77259 - Exposure of sensitive information to an unauthorized actor
CVE-2023-33144
CWE-200 Low
No
No
1.79.1 13.06.2023 SB2023061372
#VU74869 - Improper input validation
CVE-2023-24893
CWE-20 High
No
No
1.77.1 11.04.2023 SB2023041148
#VU71008 - Improper input validation
CVE-2023-21779
CWE-20 High
No
No
1.74.3 10.01.2023 SB2023011083
#VU68175 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41042
CWE-200 Medium
No
No
1.71.1 11.10.2022 SB2022101161
#VU68171 - Improper input validation
CVE-2022-41034
CWE-20 High
Public exploit available
Exploited
1.71.1 11.10.2022 SB2022101161
#VU67292 - Permissions, Privileges, and Access Controls
CVE-2022-38020
CWE-264 Medium
No
No
1.71.1 14.09.2022 SB2022091408
#VU62968 - Improper input validation
CVE-2022-30129
CWE-20 High
No
No
1.67.1 10.05.2022 SB2022051028
#VU62717 - Permissions, Privileges, and Access Controls
CVE-2022-26921
CWE-264 Low
No
No
1.66.2 02.05.2022 SB2022050207
#VU61141 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-24526
CWE-451 Medium
No
No
1.65.1 08.03.2022 SB2022030824
#VU60382 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21991
CWE-94 High
No
No
1.64.1 08.02.2022 SB2022020823


Showing elements 21 - 40 out of 42