Known vulnerabilities in Visual Studio Code - page 3

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:vscode:*:*:*:*:*:*:*:*
Total vulnerabilities: 62
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Visual Studio Code Visual Studio Code is affected by 62 known vulnerabilities: 1 critical, 28 high, 17 medium, 16 low Critical High Medium Low

Vulnerabilities (62)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60382 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21991
CWE-94 High
No
No
1.64.1 08.02.2022 SB2022020823
#VU58946 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-43908
CWE-451 Medium
Available
No
- 14.12.2021 SB2021121467
#VU58945 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-43891
CWE-94 High
Available
No
- 14.12.2021 SB2021121467
#VU58051 - Permissions, Privileges, and Access Controls
CVE-2021-42322
CWE-264 Low
No
No
- 09.11.2021 SB2021110923
#VU56579 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-26437
CWE-451 Medium
No
No
- 14.09.2021 SB2021091447
#VU54808 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34528
CWE-94 High
No
No
- 13.07.2021 SB2021071361
#VU54807 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34529
CWE-94 High
No
No
- 13.07.2021 SB2021071361
#VU54792 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-34479
CWE-451 Low
No
No
- 13.07.2021 SB2021071353
#VU53122 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31214
CWE-94 High
No
No
- 11.05.2021 SB2021051140
SB2021072008
#VU53120 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31211
CWE-94 High
No
No
- 11.05.2021 SB2021051140
SB2021072008
#VU52173 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28471
CWE-94 High
No
No
- 13.04.2021 SB2021041355
#VU52072 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28473
CWE-94 High
No
No
- 13.04.2021 SB2021041309
#VU52071 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28477
CWE-94 High
No
No
- 13.04.2021 SB2021041309
#VU52070 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28475
CWE-94 High
No
No
- 13.04.2021 SB2021041309
#VU52069 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28469
CWE-94 High
No
No
- 13.04.2021 SB2021041309
#VU52068 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28457
CWE-94 High
No
No
- 13.04.2021 SB2021041309
#VU51352 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-27060
CWE-94 High
No
No
- 09.03.2021 SB2021030957
#VU47693 - Improper input validation
CVE-2020-17023
CWE-20 High
No
No
1.50.1 16.10.2020 SB2020101603
#VU47619 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-16977
CWE-94 Medium
No
No
2020.9.114305 13.10.2020 SB2020101363
#VU46458 - Improper input validation
CVE-2020-16881
CWE-20 High
No
No
1.48.2 08.09.2020 SB2020090831


Showing elements 41 - 60 out of 62