Known vulnerabilities in Visual Studio Code - page 2

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:vscode:*:*:*:*:*:*:*:*
Total vulnerabilities: 62
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Visual Studio Code Visual Studio Code is affected by 62 known vulnerabilities: 1 critical, 28 high, 17 medium, 16 low Critical High Medium Low

Vulnerabilities (62)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107292 - Improper Access Control
CVE-2025-20570
CWE-284 Low
No
No
1.99.1 09.04.2025 SB2025040960
#VU105567 - Untrusted Search Path
CVE-2025-26631
CWE-426 Medium
No
No
- 11.03.2025 SB20250311100
#VU103827 - Improper Access Control
CVE-2025-24042
CWE-284 Low
No
No
1.97.1 11.02.2025 SB20250211129
#VU103818 - Uncontrolled Search Path Element
CVE-2025-24039
CWE-427 Low
No
No
1.97.1 11.02.2025 SB20250211120
#VU98264 - Command injection
CVE-2024-43601
CWE-77 Medium
No
No
1.94.1 09.10.2024 SB2024100925
#VU98260 - Missing Authentication for Critical Function
CVE-2024-43488
CWE-306 High
No
No
- 09.10.2024 SB2024100923
#VU87450 - Permissions, Privileges, and Access Controls
CVE-2024-26165
CWE-264 Medium
No
No
1.87.2 12.03.2024 SB20240312336
#VU81244 - Heap-based Buffer Overflow
CVE-2023-5217
CWE-122 Critical
Available
Exploited
1.82.3 27.09.2023 SB2023092804
SB2023092847
SB2023092851
and 101 more
#VU80729 - Improper input validation
CVE-2023-36742
CWE-20 High
No
No
1.82.1 13.09.2023 SB2023091324
#VU80728 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39956
CWE-94 Medium
No
No
1.80.2 13.09.2023 SB2023091322
SB2023091323
#VU77259 - Exposure of sensitive information to an unauthorized actor
CVE-2023-33144
CWE-200 Low
No
No
1.79.1 13.06.2023 SB2023061372
#VU75932 - Exposure of sensitive information to an unauthorized actor
CVE-2023-29338
CWE-200 Low
No
No
1.78.1 09.05.2023 SB20230509119
#VU74869 - Improper input validation
CVE-2023-24893
CWE-20 High
No
No
1.77.1 11.04.2023 SB2023041148
#VU71008 - Improper input validation
CVE-2023-21779
CWE-20 High
No
No
1.74.3 10.01.2023 SB2023011083
#VU68175 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41042
CWE-200 Medium
No
No
1.71.1 11.10.2022 SB2022101161
#VU68171 - Improper input validation
CVE-2022-41034
CWE-20 High
Available
Exploited
1.71.1 11.10.2022 SB2022101161
#VU67292 - Permissions, Privileges, and Access Controls
CVE-2022-38020
CWE-264 Medium
No
No
1.71.1 14.09.2022 SB2022091408
#VU62968 - Improper input validation
CVE-2022-30129
CWE-20 High
No
No
1.67.1 10.05.2022 SB2022051028
#VU62717 - Permissions, Privileges, and Access Controls
CVE-2022-26921
CWE-264 Low
No
No
1.66.2 02.05.2022 SB2022050207
#VU61141 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-24526
CWE-451 Medium
No
No
1.65.1 08.03.2022 SB2022030824


Showing elements 21 - 40 out of 62