Known vulnerabilities in Visual Studio Code 1.34.0 - page 3

Vendor: Microsoft
Version: 1.34.0
Software CPE: cpe:2.3:a:microsoft:vscode:*:*:*:*:*:*:*:*
Total vulnerabilities: 64
Public exploits: 2
Known exploited (KEV): 2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Visual Studio Code version 1.34.0 Visual Studio Code 1.34.0 is affected by 64 vulnerabilities: 1 critical, 31 high, 21 medium, 11 low Critical High Medium Low

Vulnerabilities (64)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154285 - Improper Encoding or Escaping of Output
CVE-2026-102235
CWE-116 High
No
No
1.141.1 13.10.2026 SB2026101403
#VU154284 - Reliance on Untrusted Inputs in a Security Decision
CVE-2026-102234
CWE-807 Medium
No
No
1.141.1 13.10.2026 SB2026101403
#VU154283 - Missing Authorization
CVE-2026-102233
CWE-862 High
No
No
1.141.1 13.10.2026 SB2026101403
#VU154282 - Incorrect Authorization
CVE-2026-102232
CWE-863 Medium
No
No
1.141.1 13.10.2026 SB2026101403
#VU154281 - Improper Resolution of Path Equivalence
CVE-2026-102231
CWE-41 High
No
No
1.141.1 13.10.2026 SB2026101403
#VU154280 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-102229
CWE-22 Low
No
No
1.141.1 13.10.2026 SB2026101403
#VU80729 - Improper input validation
CVE-2023-36742
CWE-20 High
No
No
1.82.1 13.09.2023 SB2023091324
#VU80728 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39956
CWE-94 Medium
No
No
1.80.2 13.09.2023 SB2023091322
SB2023091323
#VU77259 - Exposure of sensitive information to an unauthorized actor
CVE-2023-33144
CWE-200 Low
No
No
1.79.1 13.06.2023 SB2023061372
#VU74869 - Improper input validation
CVE-2023-24893
CWE-20 High
No
No
1.77.1 11.04.2023 SB2023041148
#VU71008 - Improper input validation
CVE-2023-21779
CWE-20 High
No
No
1.74.3 10.01.2023 SB2023011083
#VU68175 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41042
CWE-200 Medium
No
No
1.71.1 11.10.2022 SB2022101161
#VU68171 - Improper input validation
CVE-2022-41034
CWE-20 High
Public exploit available
Exploited
1.71.1 11.10.2022 SB2022101161
#VU67292 - Permissions, Privileges, and Access Controls
CVE-2022-38020
CWE-264 Medium
No
No
1.71.1 14.09.2022 SB2022091408
#VU62968 - Improper input validation
CVE-2022-30129
CWE-20 High
No
No
1.67.1 10.05.2022 SB2022051028
#VU62717 - Permissions, Privileges, and Access Controls
CVE-2022-26921
CWE-264 Low
No
No
1.66.2 02.05.2022 SB2022050207
#VU61141 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-24526
CWE-451 Medium
No
No
1.65.1 08.03.2022 SB2022030824
#VU60382 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21991
CWE-94 High
No
No
1.64.1 08.02.2022 SB2022020823
#VU47693 - Improper input validation
CVE-2020-17023
CWE-20 High
No
No
1.50.1 16.10.2020 SB2020101603
#VU21926 - Permissions, Privileges, and Access Controls
CVE-2019-1414
CWE-264 Low
No
No
1.39.1 17.10.2019 SB2019101709


Showing elements 41 - 60 out of 64