Known vulnerabilities in Visual Studio Code 14

Vendor: Microsoft
Version: 14
Software CPE: cpe:2.3:a:microsoft:vscode:*:*:*:*:*:*:*:*
Total vulnerabilities: 11
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Visual Studio Code version 14 Visual Studio Code 14 is affected by 11 vulnerabilities: 1 critical, 4 high, 5 medium, 1 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134268 - Exposure of sensitive information to an unauthorized actor
CVE-2026-47284
CWE-200 Medium
No
No
1.123.2 10.06.2026 SB20260610110
#VU134267 - Improper input validation
CVE-2026-47281
CWE-20 High
No
No
1.123.2 10.06.2026 SB20260610110
#VU134265 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-47287
CWE-22 Medium
No
No
1.123.2 10.06.2026 SB20260610110
#VU131298 - Session Fixation
CVE-2026-41613
CWE-384 High
No
No
1.119.1 13.05.2026 SB2026051309
#VU122626 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-21523
CWE-367 Medium
No
No
1.109.1 10.02.2026 SB20260210107
#VU122622 - Command injection
CVE-2026-21518
CWE-77 High
No
No
1.109.1 10.02.2026 SB20260210107
#VU115179 - Command injection
CVE-2025-55319
CWE-77 High
No
No
1.104.0 12.09.2025 SB2025091211
#VU107398 - Improper Access Control
CVE-2025-32726
CWE-284 Low
No
No
1.99.1 12.04.2025 SB2025041203
#VU98264 - Command injection
CVE-2024-43601
CWE-77 Medium
No
No
1.94.1 09.10.2024 SB2024100925
#VU87450 - Permissions, Privileges, and Access Controls
CVE-2024-26165
CWE-264 Medium
No
No
1.87.2 12.03.2024 SB20240312336
#VU81244 - Heap-based Buffer Overflow
CVE-2023-5217
CWE-122 Critical
Public exploit available
Exploited
1.82.3 27.09.2023 SB2023092804
SB2023092847
SB2023092851
and 101 more