CVE Tools
Track your stack

Visual Studio Code

107 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Visual Studio Code, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Visual Studio Code CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Visual Studio Code CVEs per month
MonthCVEs
2024-120
2025-010
2025-022
2025-031
2025-042
2025-051
2025-060
2025-070
2025-080
2025-091
2025-100
2025-112
2025-121
2026-010
2026-022
2026-030
2026-040
2026-055
2026-068
2026-075
2026-088
2026-0912
2026-1010
2026-110

Severity

How the 107 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical33%
  • High8378%
  • Medium2120%

Latest CVEs

The 15 most recently published vulnerabilities affecting Visual Studio Code.

  1. CVE-2026-102851Visual Studio Code Security Feature Bypass Vulnerability6.1
  2. CVE-2026-69370Visual Studio Code Remote Code Execution Vulnerability8.8
  3. CVE-2026-70098Visual Studio Code Remote Code Execution Vulnerability8.8
  4. CVE-2026-102238Visual Studio Code Remote Code Execution Vulnerability9.6
  5. CVE-2026-102235Visual Studio Code Remote Code Execution Vulnerability8.8
  6. CVE-2026-102234Visual Studio Code Security Feature Bypass Vulnerability7.4
  7. CVE-2026-102232Visual Studio Code Security Feature Bypass Vulnerability7.0
  8. CVE-2026-102231Visual Studio Code Security Feature Bypass Vulnerability7.7
  9. CVE-2026-102233Visual Studio Code Security Feature Bypass Vulnerability7.8
  10. CVE-2026-102229Visual Studio Code Information Disclosure Vulnerability6.8
  11. CVE-2026-81383Visual Studio Code Information Disclosure Vulnerability7.4
  12. CVE-2026-78462Visual Studio Code Security Feature Bypass Vulnerability8.8
  13. CVE-2026-81381GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability6.5
  14. CVE-2026-81380GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability5.3
  15. CVE-2026-81379Visual Studio Code Security Feature Bypass Vulnerability8.2

Product grouping is registry-driven, with AI assist and human review. How it works