Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductVisual Studio Code (6500549c-c958-5fc8-9366-44e64d367c0f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/microsoft/vscode purl2cpe 2026-06-01 10:17:05.636856
pkg:nuget/rb.vscode purl2cpe 2026-06-01 10:17:05.636858
pkg:rpm/opensuse/microsoft-vscode purl2cpe 2026-06-01 10:17:05.636860

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-69320 vulnerable 2026-09-16 04:34:21.841138 Visual Studio Code Remote Code Execution Vulnerability
HIGH (8.8)
Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
Published: 2026-08-11T17:05:17.020Z
Updated: 2026-09-16T16:24:43.516Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-69278 vulnerable 2026-09-16 04:34:20.212892 Visual Studio Code Security Feature Bypass Vulnerability
HIGH (7.8)
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
Published: 2026-08-11T17:05:17.637Z
Updated: 2026-09-16T16:24:44.117Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-69306 vulnerable 2026-09-16 04:34:18.791590 Visual Studio Code Security Feature Bypass Vulnerability
HIGH (8.2)
Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Published: 2026-08-11T17:05:18.170Z
Updated: 2026-09-16T16:24:44.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47285 vulnerable 2026-09-16 04:34:00.549671 Visual Studio Code Information Disclosure Vulnerability
MEDIUM (6.5)
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
Published: 2026-08-11T17:03:41.085Z
Updated: 2026-09-16T16:23:02.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-78462 vulnerable 2026-09-16 04:33:44.667371 Visual Studio Code Security Feature Bypass Vulnerability
HIGH (8.8)
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Published: 2026-09-08T17:18:29.437Z
Updated: 2026-09-18T20:46:03.211Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-78461 vulnerable 2026-09-16 04:33:44.384945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-70334 vulnerable 2026-09-16 04:33:00.915251 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-70336 vulnerable 2026-09-16 04:33:00.037332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81377 vulnerable 2026-09-16 04:32:48.494691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81356 vulnerable 2026-09-16 04:32:48.406124 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81357 vulnerable 2026-09-16 04:32:48.307447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81383 vulnerable 2026-09-16 04:32:48.273224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81376 vulnerable 2026-09-16 04:32:48.261984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81378 vulnerable 2026-09-16 04:32:48.203480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81381 vulnerable 2026-09-16 04:32:48.074406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81380 vulnerable 2026-09-16 04:32:48.012567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81379 vulnerable 2026-09-16 04:32:47.968604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59113 vulnerable 2026-09-16 04:32:46.792815 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-58650 vulnerable 2026-09-16 04:32:42.985723 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57102 vulnerable 2026-07-29 01:00:29.478821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57101 vulnerable 2026-07-29 01:00:29.478634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48569 vulnerable 2026-07-29 00:55:01.439555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47284 vulnerable 2026-07-29 00:54:59.975211 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47282 vulnerable 2026-07-29 00:54:59.974868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47281 vulnerable 2026-07-29 00:54:59.974530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-45496 vulnerable 2026-07-29 00:52:15.545938 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40376 vulnerable 2026-07-29 00:49:29.791158 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-41613 vulnerable 2026-06-08 08:03:15.619047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-41611 vulnerable 2026-06-08 08:03:15.608477 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-41610 vulnerable 2026-06-08 08:03:15.608138 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-41109 vulnerable 2026-06-08 08:03:14.877496 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21523 vulnerable 2026-06-08 07:49:16.517536 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21518 vulnerable 2026-06-08 07:49:16.495004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64660 vulnerable 2026-06-08 07:39:20.030144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62453 vulnerable 2026-06-08 07:37:29.688377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55319 vulnerable 2026-06-08 07:33:14.611660 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32726 vulnerable 2026-06-08 07:19:00.696797 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26631 vulnerable 2026-06-08 07:14:49.586229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24042 vulnerable 2026-06-08 07:12:47.733435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24039 vulnerable 2026-06-08 07:12:47.731708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21264 vulnerable 2026-06-08 07:08:52.094293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43601 vulnerable 2026-06-08 06:45:52.481631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43488 vulnerable 2026-06-08 06:45:51.721364 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26165 vulnerable 2026-06-08 06:31:25.047623 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36742 vulnerable 2026-06-08 06:08:13.167449 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33144 vulnerable 2026-06-08 06:06:21.672441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29338 vulnerable 2026-06-08 06:02:39.703285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24893 vulnerable 2026-06-08 05:56:07.891557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-21779 vulnerable 2026-06-08 05:54:22.498637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41042 vulnerable 2026-06-08 05:48:29.364237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41034 vulnerable 2026-06-08 05:48:29.308969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38020 vulnerable 2026-06-08 05:47:14.139891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30129 vulnerable 2026-06-08 05:43:37.011274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26921 vulnerable 2026-06-08 05:41:54.548339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24526 vulnerable 2026-06-08 05:41:00.920390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21991 vulnerable 2026-06-08 05:40:03.601644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43908 vulnerable 2026-06-08 05:36:44.580824 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43891 vulnerable 2026-06-08 05:36:44.547798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42322 vulnerable 2026-06-08 05:35:22.149970 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34529 vulnerable 2026-06-08 05:32:13.715304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34528 vulnerable 2026-06-08 05:32:13.714998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34479 vulnerable 2026-06-08 05:32:13.509291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31214 vulnerable 2026-06-08 05:31:52.275499 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31211 vulnerable 2026-06-08 05:31:52.273014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28477 vulnerable 2026-06-08 05:31:24.382840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28475 vulnerable 2026-06-08 05:31:24.375845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28473 vulnerable 2026-06-08 05:31:24.373673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28471 vulnerable 2026-06-08 05:31:24.371415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28469 vulnerable 2026-06-08 05:31:24.368222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28457 vulnerable 2026-06-08 05:31:24.355114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27060 vulnerable 2026-06-08 05:30:45.847779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26437 vulnerable 2026-06-08 05:30:44.745838 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-1639 vulnerable 2026-06-08 05:29:01.890002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1416 vulnerable 2026-06-08 05:21:00.078944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1192 vulnerable 2026-06-08 05:20:58.724810 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1171 vulnerable 2026-06-08 05:20:58.669347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-17104 vulnerable 2026-06-08 05:20:56.022561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-17023 vulnerable 2026-06-08 05:20:55.341879 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16881 vulnerable 2026-06-08 05:20:54.233963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-0604 vulnerable 2026-06-08 05:16:32.362047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1414 vulnerable 2026-06-08 05:13:25.882955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0728 vulnerable 2026-06-08 05:12:20.582097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.