Visual Studio Code
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Visual Studio Code (6500549c-c958-5fc8-9366-44e64d367c0f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/microsoft/vscode |
purl2cpe | 2026-06-01 10:17:05.636856 |
pkg:nuget/rb.vscode |
purl2cpe | 2026-06-01 10:17:05.636858 |
pkg:rpm/opensuse/microsoft-vscode |
purl2cpe | 2026-06-01 10:17:05.636860 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-41613 |
vulnerable | 2026-06-08 08:03:15.619047 |
Visual Studio Code Elevation of Privilege Vulnerability
HIGH (8.8)
Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.
Published: 2026-05-12T16:59:32.826Z
Updated: 2026-06-19T16:13:02.735Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41611 |
vulnerable | 2026-06-08 08:03:15.608477 |
Visual Studio Code Remote Code Execution Vulnerability
HIGH (7.8)
Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally.
Published: 2026-05-12T16:58:56.558Z
Updated: 2026-06-19T16:12:31.624Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41610 |
vulnerable | 2026-06-08 08:03:15.608138 |
Visual Studio Code Security Feature Bypass Vulnerability
MEDIUM (6.3)
Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
Published: 2026-05-12T16:58:55.823Z
Updated: 2026-06-19T16:12:31.005Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41109 |
vulnerable | 2026-06-08 08:03:14.877496 |
GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
HIGH (8.8)
Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network.
Published: 2026-05-12T16:58:55.238Z
Updated: 2026-07-22T20:33:53.337Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21523 |
vulnerable | 2026-06-08 07:49:16.517536 |
GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
HIGH (8)
Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network.
Published: 2026-02-10T17:51:25.077Z
Updated: 2026-05-11T21:25:52.975Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21518 |
vulnerable | 2026-06-08 07:49:16.495004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64660 |
vulnerable | 2026-06-08 07:39:20.030144 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62453 |
vulnerable | 2026-06-08 07:37:29.688377 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55319 |
vulnerable | 2026-06-08 07:33:14.611660 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32726 |
vulnerable | 2026-06-08 07:19:00.696797 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26631 |
vulnerable | 2026-06-08 07:14:49.586229 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24042 |
vulnerable | 2026-06-08 07:12:47.733435 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24039 |
vulnerable | 2026-06-08 07:12:47.731708 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-21264 |
vulnerable | 2026-06-08 07:08:52.094293 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43601 |
vulnerable | 2026-06-08 06:45:52.481631 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43488 |
vulnerable | 2026-06-08 06:45:51.721364 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26165 |
vulnerable | 2026-06-08 06:31:25.047623 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36742 |
vulnerable | 2026-06-08 06:08:13.167449 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33144 |
vulnerable | 2026-06-08 06:06:21.672441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29338 |
vulnerable | 2026-06-08 06:02:39.703285 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24893 |
vulnerable | 2026-06-08 05:56:07.891557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-21779 |
vulnerable | 2026-06-08 05:54:22.498637 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41042 |
vulnerable | 2026-06-08 05:48:29.364237 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41034 |
vulnerable | 2026-06-08 05:48:29.308969 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38020 |
vulnerable | 2026-06-08 05:47:14.139891 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30129 |
vulnerable | 2026-06-08 05:43:37.011274 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26921 |
vulnerable | 2026-06-08 05:41:54.548339 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24526 |
vulnerable | 2026-06-08 05:41:00.920390 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-21991 |
vulnerable | 2026-06-08 05:40:03.601644 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43908 |
vulnerable | 2026-06-08 05:36:44.580824 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43891 |
vulnerable | 2026-06-08 05:36:44.547798 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42322 |
vulnerable | 2026-06-08 05:35:22.149970 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34529 |
vulnerable | 2026-06-08 05:32:13.715304 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34528 |
vulnerable | 2026-06-08 05:32:13.714998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34479 |
vulnerable | 2026-06-08 05:32:13.509291 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31214 |
vulnerable | 2026-06-08 05:31:52.275499 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31211 |
vulnerable | 2026-06-08 05:31:52.273014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28477 |
vulnerable | 2026-06-08 05:31:24.382840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28475 |
vulnerable | 2026-06-08 05:31:24.375845 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28473 |
vulnerable | 2026-06-08 05:31:24.373673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28471 |
vulnerable | 2026-06-08 05:31:24.371415 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28469 |
vulnerable | 2026-06-08 05:31:24.368222 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28457 |
vulnerable | 2026-06-08 05:31:24.355114 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27060 |
vulnerable | 2026-06-08 05:30:45.847779 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26437 |
vulnerable | 2026-06-08 05:30:44.745838 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-1639 |
vulnerable | 2026-06-08 05:29:01.890002 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1416 |
vulnerable | 2026-06-08 05:21:00.078944 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1192 |
vulnerable | 2026-06-08 05:20:58.724810 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1171 |
vulnerable | 2026-06-08 05:20:58.669347 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-17104 |
vulnerable | 2026-06-08 05:20:56.022561 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-17023 |
vulnerable | 2026-06-08 05:20:55.341879 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16881 |
vulnerable | 2026-06-08 05:20:54.233963 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-0604 |
vulnerable | 2026-06-08 05:16:32.362047 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1414 |
vulnerable | 2026-06-08 05:13:25.882955 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0728 |
vulnerable | 2026-06-08 05:12:20.582097 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.