Known Vulnerabilities for Visual Studio Code by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Visual Studio Code" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103572 json | Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management S... | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-102851 json | Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally. | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-102238 json | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized a... | Not Provided | 2026-10-13 | 2026-10-14 |
| CVE-2026-102235 json | Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-10-13 | 2026-10-14 |
| CVE-2026-102234 json | Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a securit... | Not Provided | 2026-10-13 | 2026-10-14 |
| CVE-2026-102233 json | Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Not Provided | 2026-10-13 | 2026-10-16 |
| CVE-2026-102232 json | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-102231 json | Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature lo... | Not Provided | 2026-10-13 | 2026-10-26 |
| CVE-2026-102229 json | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized att... | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-89325 json | An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-pr... | Not Provided | 2026-09-24 | 2026-09-26 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Microsoft | Visual Studio Code | 2020.5.80290 | |||
| Application | Microsoft | Visual Studio Code | 2020.5.78807 | |||
| Application | Microsoft | Visual Studio Code | 2020.5.0 | |||
| Application | Microsoft | Visual Studio Code | 2020.4.76186 | |||
| Application | Microsoft | Visual Studio Code | 2020.4.74986 | |||
| Application | Microsoft | Visual Studio Code | 2020.3.71659 | |||
| Application | Microsoft | Visual Studio Code | 2020.3.71113 | |||
| Application | Microsoft | Visual Studio Code | 2020.3.69010 | |||
| Application | Microsoft | Visual Studio Code | 2020.2.64397 | |||
| Application | Microsoft | Visual Studio Code | 2020.2.63990 | |||
| Application | Microsoft | Visual Studio Code | 2020.2.63072 | |||
| Application | Microsoft | Visual Studio Code | 2020.2.62710 | |||
| Application | Microsoft | Visual Studio Code | 2020.1.58038 | |||
| Application | Microsoft | Visual Studio Code | 2020.1.57204 | |||
| Application | Microsoft | Visual Studio Code | 2019.9.34911 | |||
| Application | Microsoft | Visual Studio Code | 2019.9.34474 | |||
| Application | Microsoft | Visual Studio Code | 2019.8.30787 | |||
| Application | Microsoft | Visual Studio Code | 2019.8.29288 | |||
| Application | Microsoft | Visual Studio Code | 2019.6.24221 | |||
| Application | Microsoft | Visual Studio Code | 2019.6.22090 |