Known Vulnerabilities for Visual Studio Code by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Visual Studio Code" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-50519 json | Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacke... | Not Provided | 2026-06-19 | 2026-06-22 |
| CVE-2026-48569 json | Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Not Provided | 2026-06-09 | 2026-06-10 |
| CVE-2026-47292 json | Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate pri... | Not Provided | 2026-06-09 | 2026-06-10 |
| CVE-2026-47287 json | Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network. | Not Provided | 2026-06-09 | 2026-06-10 |
| CVE-2026-47284 json | Exposure of sensitive information to an unauthorized actor in Visual Studio Code allows an unauthorized attacker to disclose ... | Not Provided | 2026-06-09 | 2026-06-10 |
| CVE-2026-47281 json | Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. | Not Provided | 2026-06-09 | 2026-06-10 |
| CVE-2026-45482 json | Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacke... | Not Provided | 2026-06-09 | 2026-06-19 |
| CVE-2026-41613 json | Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. | Not Provided | 2026-05-12 | 2026-05-14 |
| CVE-2026-41612 json | Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally. | Not Provided | 2026-05-12 | 2026-05-14 |
| CVE-2026-41611 json | Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized at... | Not Provided | 2026-05-12 | 2026-05-14 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Microsoft | Visual Studio Code | 2020.5.80290 | |||
| Application | Microsoft | Visual Studio Code | 2020.5.78807 | |||
| Application | Microsoft | Visual Studio Code | 2020.5.0 | |||
| Application | Microsoft | Visual Studio Code | 2020.4.76186 | |||
| Application | Microsoft | Visual Studio Code | 2020.4.74986 | |||
| Application | Microsoft | Visual Studio Code | 2020.3.71659 | |||
| Application | Microsoft | Visual Studio Code | 2020.3.71113 | |||
| Application | Microsoft | Visual Studio Code | 2020.3.69010 | |||
| Application | Microsoft | Visual Studio Code | 2020.2.64397 | |||
| Application | Microsoft | Visual Studio Code | 2020.2.63990 | |||
| Application | Microsoft | Visual Studio Code | 2020.2.63072 | |||
| Application | Microsoft | Visual Studio Code | 2020.2.62710 | |||
| Application | Microsoft | Visual Studio Code | 2020.1.58038 | |||
| Application | Microsoft | Visual Studio Code | 2020.1.57204 | |||
| Application | Microsoft | Visual Studio Code | 2019.9.34911 | |||
| Application | Microsoft | Visual Studio Code | 2019.9.34474 | |||
| Application | Microsoft | Visual Studio Code | 2019.8.30787 | |||
| Application | Microsoft | Visual Studio Code | 2019.8.29288 | |||
| Application | Microsoft | Visual Studio Code | 2019.6.24221 | |||
| Application | Microsoft | Visual Studio Code | 2019.6.22090 |