Visual Studio Code
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:-:*:*
part: a version: * update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Visual Studio Code (6500549c-c958-5fc8-9366-44e64d367c0f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | - |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-21523 |
vulnerable | 2026-06-08 07:49:16.517587 |
GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
HIGH (8)
Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network.
Published: 2026-02-10T17:51:25.077Z
Updated: 2026-05-11T21:25:52.975Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21518 |
vulnerable | 2026-06-08 07:49:16.496994 |
GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
HIGH (8.8)
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Published: 2026-02-10T17:51:15.121Z
Updated: 2026-05-11T21:25:51.574Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64660 |
vulnerable | 2026-06-08 07:39:20.031423 |
GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
HIGH (8)
Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network.
Published: 2025-11-20T22:18:57.308Z
Updated: 2026-02-26T16:07:41.825Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62453 |
vulnerable | 2026-06-08 07:37:29.689717 |
GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
MEDIUM (5)
Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature locally.
Published: 2025-11-11T17:59:50.831Z
Updated: 2026-02-13T20:46:17.573Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55319 |
vulnerable | 2026-06-08 07:33:14.612720 |
Agentic AI and Visual Studio Code Remote Code Execution Vulnerability
HIGH (8.8)
Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network.
Published: 2025-09-12T00:49:27.731Z
Updated: 2026-02-26T17:48:40.579Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.