Visual studio code

This hub aggregates every CVE we track for Visual studio code, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Visual studio code.

• BDU:2026-08016Уязвимость интерфейса Webview API редактора исходного кода Visual Studio Code, позволяющая нарушителю осуществить подмену данных и проводить межсайтовые сценарные атаки (XSS)8.8Jun 10, 2026
• CVE-2026-48569Visual Studio Code Security Feature Bypass Vulnerability7.1Jun 9, 2026
• CVE-2026-47284Visual Studio Code Information Disclosure Vulnerability6.5Jun 9, 2026
• CVE-2026-47281Visual Studio Code Elevation of Privilege Vulnerability9.6Jun 9, 2026
• CVE-2026-40376Visual Studio Code Elevation of Privilege Vulnerability7.5Jun 9, 2026
• CVE-2026-47292Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability7.8Jun 9, 2026
• CVE-2026-47287Visual Studio Code Tampering Vulnerability6.5Jun 9, 2026
• CVE-2026-41613Visual Studio Code Elevation of Privilege Vulnerability8.8May 12, 2026
• CVE-2026-41612Visual Studio Code Information Disclosure Vulnerability5.5May 12, 2026
• CVE-2026-41611Visual Studio Code Remote Code Execution Vulnerability7.8May 12, 2026
• CVE-2026-41610Visual Studio Code Security Feature Bypass Vulnerability6.3May 12, 2026
• CVE-2026-41109GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability8.8May 12, 2026
• CVE-2026-21523GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability8.0Feb 10, 2026
• CVE-2026-21518GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability8.8Feb 10, 2026
• CVE-2025-68120Unexpected untrusted code execution in github.com/golang/vscode-go5.4Dec 29, 2025