CVE Tools
Track your stack

Visual Studio Code

107 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Visual Studio Code, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Visual Studio Code CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Visual Studio Code CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-022
2025-031
2025-042
2025-051
2025-060
2025-070
2025-080
2025-091
2025-100
2025-112
2025-121
2026-010
2026-022
2026-030
2026-040
2026-055
2026-068
2026-075
2026-088
2026-0912
2026-1010

Severity

How the 107 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical33%
  • High8378%
  • Medium2120%

Latest CVEs

The 15 most recently published vulnerabilities affecting Visual Studio Code.

  1. CVE-2026-102851Visual Studio Code Security Feature Bypass Vulnerability6.1
  2. CVE-2026-69370Visual Studio Code Remote Code Execution Vulnerability8.8
  3. CVE-2026-70098Visual Studio Code Remote Code Execution Vulnerability8.8
  4. CVE-2026-102238Visual Studio Code Remote Code Execution Vulnerability9.6
  5. CVE-2026-102231Visual Studio Code Security Feature Bypass Vulnerability7.7
  6. CVE-2026-102233Visual Studio Code Security Feature Bypass Vulnerability7.8
  7. CVE-2026-102234Visual Studio Code Security Feature Bypass Vulnerability7.4
  8. CVE-2026-102232Visual Studio Code Security Feature Bypass Vulnerability7.0
  9. CVE-2026-102235Visual Studio Code Remote Code Execution Vulnerability8.8
  10. CVE-2026-102229Visual Studio Code Information Disclosure Vulnerability6.8
  11. CVE-2026-81383Visual Studio Code Information Disclosure Vulnerability7.4
  12. CVE-2026-78462Visual Studio Code Security Feature Bypass Vulnerability8.8
  13. CVE-2026-81381GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability6.5
  14. CVE-2026-81379Visual Studio Code Security Feature Bypass Vulnerability8.2
  15. CVE-2026-81380GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability5.3

Product grouping is registry-driven, with AI assist and human review. How it works