en
Severity across 12 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 83 vulnerability records affecting Visual Studio Code.
Among the 12 records analyzed by CyStack, 8 are High or Critical and 0 appear in the CISA KEV catalog.
Compare the version you run with each vulnerability and the provider guidance below. The data only includes records analyzed so far.
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-81383Visual Studio Code Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-78462Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-81381GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-81380GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-81379Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-81378Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-81377Visual Studio Code Tampering Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityMedium |
CVE-2026-81376Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityCritical |
CVE-2026-81357Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-81356Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-78461Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-70334Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/08/2026 | SeverityHigh |
CVE-2026-70336Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/11/2026 | SeverityHigh |
CVE-2026-70335GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/11/2026 | SeverityHigh |
CVE-2026-69306Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/11/2026 | SeverityHigh |
CVE-2026-69278Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/11/2026 | SeverityHigh |
CVE-2026-69320Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/11/2026 | SeverityHigh |
CVE-2026-47285Visual Studio Code Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/11/2026 | SeverityMedium |
CVE-2026-59113Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/11/2026 | SeverityHigh |
CVE-2026-58650Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/11/2026 | SeverityHigh |
CVE-2026-57102Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityHigh |
CVE-2026-57101Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityHigh |
CVE-2026-50520Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityHigh |
CVE-2026-45496Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityMedium |
CVE-2026-47282GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityMedium |
CVE-2026-48569Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published06/09/2026 | SeverityHigh |
CVE-2026-47284Visual Studio Code Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published06/09/2026 | SeverityMedium |
CVE-2026-47281Visual Studio Code Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published06/09/2026 | SeverityCritical |
CVE-2026-40376Visual Studio Code Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published06/09/2026 | SeverityHigh |
CVE-2026-47287Visual Studio Code Tampering Vulnerability | Exploitation statusNot known exploited | FixYes | Published06/09/2026 | SeverityMedium |
CVE-2026-41613Visual Studio Code Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-41611Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-41610Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityMedium |
CVE-2026-41109GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-21523GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/10/2026 | SeverityHigh |
CVE-2026-21518GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/10/2026 | SeverityHigh |
CVE-2025-64660GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/20/2025 | SeverityHigh |
CVE-2025-62453GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/11/2025 | SeverityMedium |
CVE-2025-55319Agentic AI and Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/12/2025 | SeverityHigh |
CVE-2025-21264Visual Studio Code Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/13/2025 | SeverityHigh |
CVE-2025-32726Visual Studio Code Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/12/2025 | SeverityMedium |
CVE-2025-26631Visual Studio Code Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published03/11/2025 | SeverityHigh |
CVE-2025-24039Visual Studio Code Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/11/2025 | SeverityHigh |
CVE-2024-43488Visual Studio Code extension for Arduino Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/08/2024 | SeverityHigh |
CVE-2024-26165Visual Studio Code Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published03/12/2024 | SeverityHigh |
CVE-2023-36742Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/12/2023 | SeverityHigh |
CVE-2023-33144Visual Studio Code Spoofing Vulnerability | Exploitation statusNot known exploited | FixYes | Published06/13/2023 | SeverityMedium |
CVE-2023-29338Visual Studio Code Spoofing Vulnerability | Exploitation statusPublic exploit | FixYes | Published05/09/2023 | SeverityMedium |
CVE-2023-24893Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/11/2023 | SeverityHigh |
CVE-2023-21779Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published01/10/2023 | SeverityHigh |
CVE-2022-41042Visual Studio Code Information Disclosure Vulnerability | Exploitation statusNot confirmed | FixYes | Published10/11/2022 | SeverityHigh |
CVE-2022-41034Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/11/2022 | SeverityHigh |
CVE-2022-38020Visual Studio Code Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/13/2022 | SeverityHigh |
CVE-2022-30129Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/10/2022 | SeverityHigh |
CVE-2022-26921Visual Studio Code Elevation of Privilege Vulnerability | Exploitation statusNot confirmed | FixYes | Published04/15/2022 | SeverityHigh |
CVE-2022-24526Visual Studio Code Spoofing Vulnerability | Exploitation statusNot known exploited | FixYes | Published03/09/2022 | SeverityMedium |
CVE-2022-21991Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published02/09/2022 | SeverityHigh |
CVE-2021-43908Visual Studio Code Spoofing Vulnerability | Exploitation statusNot confirmed | FixYes | Published12/15/2021 | SeverityMedium |
CVE-2021-43891Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published12/15/2021 | SeverityHigh |
CVE-2021-42322Visual Studio Code Elevation of Privilege Vulnerability | Exploitation statusNot confirmed | FixYes | Published11/10/2021 | SeverityHigh |
CVE-2021-26437Visual Studio Code Spoofing Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/15/2021 | SeverityMedium |
CVE-2021-34529Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published07/14/2021 | SeverityHigh |
CVE-2021-34528Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published07/14/2021 | SeverityHigh |
CVE-2021-34479Microsoft Visual Studio Spoofing Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/14/2021 | SeverityHigh |
CVE-2021-31214Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published05/11/2021 | SeverityHigh |
CVE-2021-31211Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published05/11/2021 | SeverityHigh |
CVE-2021-28475Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published04/13/2021 | SeverityHigh |
CVE-2021-28477Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published04/13/2021 | SeverityHigh |
CVE-2021-28473Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published04/13/2021 | SeverityHigh |
CVE-2021-28471Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/13/2021 | SeverityHigh |
CVE-2021-28469Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published04/13/2021 | SeverityHigh |
CVE-2021-28457Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/13/2021 | SeverityHigh |
CVE-2021-27060Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published03/11/2021 | SeverityHigh |
CVE-2021-1639Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published02/25/2021 | SeverityHigh |
CVE-2020-17104Visual Studio Code JSHint Extension Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published11/11/2020 | SeverityHigh |
CVE-2020-17023Visual Studio JSON Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published10/16/2020 | SeverityHigh |
CVE-2020-16881Visual Studio JSON Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published09/11/2020 | SeverityHigh |
CVE-2020-0604Visual Studio Code Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published08/17/2020 | SeverityHigh |
CVE-2020-1416CVE-2020-1416 | Exploitation statusNot confirmed | FixNot confirmed | Published07/14/2020 | SeverityUnknown |
CVE-2020-1192Visual Studio Code Python Extension Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published05/21/2020 | SeverityUnknown |
CVE-2020-1171Visual Studio Code Python Extension Remote Code Execution Vulnerability | Exploitation statusNot confirmed | FixYes | Published05/21/2020 | SeverityUnknown |
CVE-2019-1414CVE-2019-1414 | Exploitation statusNot confirmed | FixNot confirmed | Published01/24/2020 | SeverityUnknown |
CVE-2019-0728CVE-2019-0728 | Exploitation statusNot confirmed | FixNot confirmed | Published03/06/2019 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
