Product by Microsoft
Visual Studio Code
99 known vulnerabilities in Visual Studio Code (Microsoft), 0 of them actively exploited (CISA KEV).
Key figures
99
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| High | CVE-2022-30129 | Visual Studio Code Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2022-41034 | Visual Studio Code Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2019-0728 | Microsoft Visual Studio Code: Remote Code Execution | 7.8 | |
| High | CVE-2021-43891 | Visual Studio Code Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2020-1416 | Microsoft Visual Studio 2019: Privilege Escalation | 8.8 | |
| High | CVE-2018-0597 | Microsoft Visual Studio Code: Privilege Escalation | 7.8 | |
| High | CVE-2020-16881 | Visual Studio JSON Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2021-34529 | Visual Studio Code Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2020-17023 | Visual Studio JSON Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2020-1192 | Visual Studio Code Python Extension Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2021-28471 | Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2020-17148 | Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2020-17104 | Visual Studio Code JSHint Extension Remote Code Execution Vulnerability | 7.8 | |
| Critical | CVE-2026-81376 | Visual Studio Code Security Feature Bypass Vulnerability | 9.6 | |
| High | CVE-2020-0604 | Visual Studio Code Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2021-34479 | Microsoft Visual Studio Spoofing Vulnerability | 7.8 | |
| High | CVE-2026-21518 | GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability | 8.8 | |
| High | CVE-2021-27060 | Visual Studio Code Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2021-34528 | Visual Studio Code Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2024-26165 | Visual Studio Code Elevation of Privilege Vulnerability | 8.8 | |
| High | CVE-2021-31214 | Visual Studio Code Remote Code Execution Vulnerability | 7.8 | |
| Critical | CVE-2026-102238 | Visual Studio Code Remote Code Execution Vulnerability | 9.6 | |
| High | CVE-2021-28475 | Visual Studio Code Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2021-28469 | Visual Studio Code Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2021-28473 | Visual Studio Code Remote Code Execution Vulnerability | 7.8 |
News
- NCSC-2026-0426 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Toolsncsc-nl,
- NCSC-2026-0351 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Toolsncsc-nl,
- NCSC-2026-0285 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Toolsncsc-nl,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 27sans-atrisk-mail,
- NCSC-2026-0235 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Toolsncsc-nl,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 24sans-atrisk-mail,