Known vulnerabilities in Visual Studio Code 1.38.0 - page 2

Vendor: Microsoft
Version: 1.38.0
Software CPE: cpe:2.3:a:microsoft:vscode:*:*:*:*:*:*:*:*
Total vulnerabilities: 34
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Visual Studio Code version 1.38.0 Visual Studio Code 1.38.0 is affected by 34 vulnerabilities: 1 critical, 11 high, 12 medium, 10 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80729 - Improper input validation
CVE-2023-36742
CWE-20 High
No
No
1.82.1 13.09.2023 SB2023091324
#VU80728 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39956
CWE-94 Medium
No
No
1.80.2 13.09.2023 SB2023091322
SB2023091323
#VU77259 - Exposure of sensitive information to an unauthorized actor
CVE-2023-33144
CWE-200 Low
No
No
1.79.1 13.06.2023 SB2023061372
#VU74869 - Improper input validation
CVE-2023-24893
CWE-20 High
No
No
1.77.1 11.04.2023 SB2023041148
#VU71008 - Improper input validation
CVE-2023-21779
CWE-20 High
No
No
1.74.3 10.01.2023 SB2023011083
#VU68175 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41042
CWE-200 Medium
No
No
1.71.1 11.10.2022 SB2022101161
#VU68171 - Improper input validation
CVE-2022-41034
CWE-20 High
Public exploit available
Exploited
1.71.1 11.10.2022 SB2022101161
#VU67292 - Permissions, Privileges, and Access Controls
CVE-2022-38020
CWE-264 Medium
No
No
1.71.1 14.09.2022 SB2022091408
#VU62968 - Improper input validation
CVE-2022-30129
CWE-20 High
No
No
1.67.1 10.05.2022 SB2022051028
#VU62717 - Permissions, Privileges, and Access Controls
CVE-2022-26921
CWE-264 Low
No
No
1.66.2 02.05.2022 SB2022050207
#VU61141 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-24526
CWE-451 Medium
No
No
1.65.1 08.03.2022 SB2022030824
#VU60382 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21991
CWE-94 High
No
No
1.64.1 08.02.2022 SB2022020823
#VU47693 - Improper input validation
CVE-2020-17023
CWE-20 High
No
No
1.50.1 16.10.2020 SB2020101603
#VU21926 - Permissions, Privileges, and Access Controls
CVE-2019-1414
CWE-264 Low
No
No
1.39.1 17.10.2019 SB2019101709


Showing elements 21 - 40 out of 34