{"schema_version":1,"title":"Microsoft Visual-Studio-Code vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 37 vulnerabilities in Microsoft Visual-Studio-Code: 0 in the last 7 days and 24 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-81383, was published on 8 September 2026.","url":"https://junglewise.ai/threats/technologies/visual-studio-code","json_url":"https://junglewise.ai/threats/technologies/visual-studio-code.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/visual-studio-code","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":24,"all_time":37,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":11,"last_90_days":24,"last_365_days":37},"latest":[{"cve":"CVE-2026-81383","cvss":7.4,"epss":0.0092,"slug":"cve-2026-81383-microsoft-visual-studio-code-information-disclosure-via-name","title":"Microsoft Visual Studio Code information disclosure via name resolution","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:54.593+00:00","url":"https://junglewise.ai/threats/cve-2026-81383-microsoft-visual-studio-code-information-disclosure-via-name"},{"cve":"CVE-2026-81381","cvss":6.5,"epss":0.0087,"slug":"cve-2026-81381-microsoft-visual-studio-code-credential-exposure-in-github","title":"Microsoft Visual Studio Code credential exposure in GitHub Copilot","severity":"medium","exploited":false,"published_at":"2026-09-08T18:20:54.47+00:00","url":"https://junglewise.ai/threats/cve-2026-81381-microsoft-visual-studio-code-credential-exposure-in-github"},{"cve":"CVE-2026-81380","cvss":5.3,"epss":0.0062,"slug":"cve-2026-81380-github-copilot-and-visual-studio-code-command-injection","title":"GitHub Copilot and Visual Studio Code command injection","severity":"medium","exploited":false,"published_at":"2026-09-08T18:20:54.33+00:00","url":"https://junglewise.ai/threats/cve-2026-81380-github-copilot-and-visual-studio-code-command-injection"},{"cve":"CVE-2026-81379","cvss":8.2,"epss":0.0054,"slug":"cve-2026-81379-microsoft-visual-studio-code-security-feature-bypass-via-improper","title":"Microsoft Visual Studio Code security feature bypass via improper failure handling","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:54.193+00:00","url":"https://junglewise.ai/threats/cve-2026-81379-microsoft-visual-studio-code-security-feature-bypass-via-improper"},{"cve":"CVE-2026-81377","cvss":6.5,"epss":0.0076,"slug":"cve-2026-81377-microsoft-visual-studio-code-path-traversal","title":"Microsoft Visual Studio Code path traversal","severity":"medium","exploited":false,"published_at":"2026-09-08T18:20:53.937+00:00","url":"https://junglewise.ai/threats/cve-2026-81377-microsoft-visual-studio-code-path-traversal"},{"cve":"CVE-2026-81376","cvss":9.6,"epss":0.0082,"slug":"cve-2026-81376-microsoft-visual-studio-code-security-feature-bypass-via","title":"Microsoft Visual Studio Code security feature bypass via incomplete comparison","severity":"critical","exploited":false,"published_at":"2026-09-08T18:20:53.813+00:00","url":"https://junglewise.ai/threats/cve-2026-81376-microsoft-visual-studio-code-security-feature-bypass-via"},{"cve":"CVE-2026-81357","cvss":8.2,"epss":0.0051,"slug":"cve-2026-81357-microsoft-visual-studio-code-server-side-request-forgery","title":"Microsoft Visual Studio Code server-side request forgery","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:53.693+00:00","url":"https://junglewise.ai/threats/cve-2026-81357-microsoft-visual-studio-code-server-side-request-forgery"},{"cve":"CVE-2026-81356","cvss":8.2,"epss":0.0054,"slug":"cve-2026-81356-visual-studio-code-http-request-response-smuggling","title":"Visual Studio Code HTTP request/response smuggling","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:53.567+00:00","url":"https://junglewise.ai/threats/cve-2026-81356-visual-studio-code-http-request-response-smuggling"},{"cve":"CVE-2026-78462","cvss":8.8,"epss":0.0076,"slug":"cve-2026-78462-microsoft-visual-studio-code-authorization-bypass-in-user","title":"Microsoft Visual Studio Code authorization bypass in user-controlled key","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:44.67+00:00","url":"https://junglewise.ai/threats/cve-2026-78462-microsoft-visual-studio-code-authorization-bypass-in-user"},{"cve":"CVE-2026-78461","cvss":7.4,"epss":0.0104,"slug":"cve-2026-78461-microsoft-visual-studio-code-path-traversal-bypass","title":"Microsoft Visual Studio Code path traversal bypass","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:44.55+00:00","url":"https://junglewise.ai/threats/cve-2026-78461-microsoft-visual-studio-code-path-traversal-bypass"},{"cve":"CVE-2026-70334","cvss":7.8,"epss":0.0047,"slug":"cve-2026-70334-microsoft-visual-studio-code-security-feature-bypass","title":"Microsoft Visual Studio Code security feature bypass","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:07.083+00:00","url":"https://junglewise.ai/threats/cve-2026-70334-microsoft-visual-studio-code-security-feature-bypass"},{"cve":"CVE-2026-70336","cvss":8.8,"epss":0.0082,"slug":"cve-2026-70336-improper-control-of-generation-of-code-code-injection-in-visual","title":"Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a netwo","severity":"high","exploited":false,"published_at":"2026-08-11T17:19:11.277+00:00","url":"https://junglewise.ai/threats/cve-2026-70336-improper-control-of-generation-of-code-code-injection-in-visual"},{"cve":"CVE-2026-70335","cvss":7.8,"epss":0.0046,"slug":"cve-2026-70335-improper-neutralization-of-special-elements-used-in-an-os-command","title":"Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows a","severity":"high","exploited":false,"published_at":"2026-08-11T17:19:11.153+00:00","url":"https://junglewise.ai/threats/cve-2026-70335-improper-neutralization-of-special-elements-used-in-an-os-command"},{"cve":"CVE-2026-69320","cvss":8.8,"epss":0.0086,"slug":"cve-2026-69320-microsoft-visual-studio-code-os-command-injection","title":"Microsoft Visual Studio Code OS command injection","severity":"high","exploited":false,"published_at":"2026-08-11T17:19:07.127+00:00","url":"https://junglewise.ai/threats/cve-2026-69320-microsoft-visual-studio-code-os-command-injection"},{"cve":"CVE-2026-69306","cvss":8.2,"epss":0.0054,"slug":"cve-2026-69306-microsoft-visual-studio-code-security-feature-bypass","title":"Microsoft Visual Studio Code security feature bypass","severity":"high","exploited":false,"published_at":"2026-08-11T17:19:07+00:00","url":"https://junglewise.ai/threats/cve-2026-69306-microsoft-visual-studio-code-security-feature-bypass"},{"cve":"CVE-2026-69278","cvss":7.8,"epss":0.0032,"slug":"cve-2026-69278-microsoft-visual-studio-code-authorization-bypass","title":"Microsoft Visual Studio Code authorization bypass","severity":"high","exploited":false,"published_at":"2026-08-11T17:19:06.88+00:00","url":"https://junglewise.ai/threats/cve-2026-69278-microsoft-visual-studio-code-authorization-bypass"},{"cve":"CVE-2026-65675","cvss":7.1,"epss":0.0064,"slug":"cve-2026-65675-microsoft-visual-studio-code-copilot-chat-security-bypass","title":"Microsoft Visual Studio Code CoPilot Chat security bypass","severity":"high","exploited":false,"published_at":"2026-08-11T17:18:55.427+00:00","url":"https://junglewise.ai/threats/cve-2026-65675-microsoft-visual-studio-code-copilot-chat-security-bypass"},{"cve":"CVE-2026-58650","cvss":7.8,"epss":0.0032,"slug":"cve-2026-58650-authorization-bypass-through-user-controlled-key-in-visual-studio","title":"Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.","severity":"high","exploited":false,"published_at":"2026-08-11T17:18:05.417+00:00","url":"https://junglewise.ai/threats/cve-2026-58650-authorization-bypass-through-user-controlled-key-in-visual-studio"},{"cve":"CVE-2026-47285","cvss":6.5,"epss":0.0092,"slug":"cve-2026-47285-improper-neutralization-of-special-elements-used-in-a-command","title":"Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to","severity":"medium","exploited":false,"published_at":"2026-08-11T17:17:58.97+00:00","url":"https://junglewise.ai/threats/cve-2026-47285-improper-neutralization-of-special-elements-used-in-a-command"},{"cve":"CVE-2026-57102","cvss":8.8,"slug":"cve-2026-57102-microsoft-visual-studio-code-security-feature-bypass","title":"Microsoft Visual Studio Code security feature bypass","severity":"high","exploited":false,"published_at":"2026-07-14T18:18:34.977+00:00","url":"https://junglewise.ai/threats/cve-2026-57102-microsoft-visual-studio-code-security-feature-bypass"},{"cve":"CVE-2026-57101","cvss":7.1,"slug":"cve-2026-57101-microsoft-visual-studio-code-xss-security-bypass","title":"Microsoft Visual Studio Code XSS security bypass","severity":"high","exploited":false,"published_at":"2026-07-14T18:18:34.85+00:00","url":"https://junglewise.ai/threats/cve-2026-57101-microsoft-visual-studio-code-xss-security-bypass"},{"cve":"CVE-2026-50520","cvss":8.4,"slug":"cve-2026-50520-microsoft-visual-studio-code-command-injection","title":"Microsoft Visual Studio Code command injection","severity":"high","exploited":false,"published_at":"2026-07-14T17:17:01.42+00:00","url":"https://junglewise.ai/threats/cve-2026-50520-microsoft-visual-studio-code-command-injection"},{"cve":"CVE-2026-47282","cvss":6.5,"slug":"cve-2026-47282-microsoft-visual-studio-code-and-github-copilot-credential","title":"Microsoft Visual Studio Code and GitHub Copilot credential disclosure","severity":"medium","exploited":false,"published_at":"2026-07-14T17:16:49.383+00:00","url":"https://junglewise.ai/threats/cve-2026-47282-microsoft-visual-studio-code-and-github-copilot-credential"},{"cve":"CVE-2026-45496","cvss":5.5,"slug":"cve-2026-45496-microsoft-visual-studio-code-path-traversal-security-bypass","title":"Microsoft Visual Studio Code path traversal security bypass","severity":"medium","exploited":false,"published_at":"2026-07-14T17:16:49.08+00:00","url":"https://junglewise.ai/threats/cve-2026-45496-microsoft-visual-studio-code-path-traversal-security-bypass"},{"cve":"CVE-2026-50519","cvss":6.5,"slug":"cve-2026-50519-microsoft-github-copilot-and-vs-code-insecure-default-information","title":"Microsoft GitHub Copilot and VS Code insecure default information disclosure","severity":"medium","exploited":false,"published_at":"2026-06-19T21:17:02.26+00:00","url":"https://junglewise.ai/threats/cve-2026-50519-microsoft-github-copilot-and-vs-code-insecure-default-information"}],"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":8},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":1,"exploited":0,"vulnerabilities":11},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Microsoft Windows","slug":"windows-","vulnerabilities":977,"url":"https://junglewise.ai/threats/technologies/windows-"},{"name":"Microsoft Windows 10","slug":"windows-10","vulnerabilities":588,"url":"https://junglewise.ai/threats/technologies/windows-10"},{"name":"Microsoft Windows 11","slug":"windows-11","vulnerabilities":493,"url":"https://junglewise.ai/threats/technologies/windows-11"},{"name":"Microsoft Windows Server 2012","slug":"windows-server-2012","vulnerabilities":293,"url":"https://junglewise.ai/threats/technologies/windows-server-2012"},{"name":"Microsoft Windows Server 2016","slug":"windows-server-2016","vulnerabilities":213,"url":"https://junglewise.ai/threats/technologies/windows-server-2016"},{"name":"Microsoft Windows Server 2019","slug":"windows-server-2019","vulnerabilities":211,"url":"https://junglewise.ai/threats/technologies/windows-server-2019"},{"name":"Microsoft Windows 11 24h2","slug":"windows-11-24h2","vulnerabilities":192,"url":"https://junglewise.ai/threats/technologies/windows-11-24h2"},{"name":"Microsoft Windows Server 2022","slug":"windows-server-2022","vulnerabilities":178,"url":"https://junglewise.ai/threats/technologies/windows-server-2022"},{"name":"Microsoft Edge","slug":"edge-chromium-based","vulnerabilities":168,"url":"https://junglewise.ai/threats/technologies/edge-chromium-based"},{"name":"Microsoft Windows 11 25h2","slug":"windows-11-25h2","vulnerabilities":161,"url":"https://junglewise.ai/threats/technologies/windows-11-25h2"},{"name":"Microsoft Windows 11 Version 26H1","slug":"windows-11-version-26h1","vulnerabilities":135,"url":"https://junglewise.ai/threats/technologies/windows-11-version-26h1"},{"name":"Microsoft Windows Server 2025","slug":"windows-server-2025","vulnerabilities":124,"url":"https://junglewise.ai/threats/technologies/windows-server-2025"}],"technology":{"hub":true,"name":"Microsoft Visual-Studio-Code","slug":"visual-studio-code","vendor":{"name":"Microsoft","slug":"microsoft","url":"https://junglewise.ai/threats/vendors/microsoft"},"aliases":[],"category":"ide","homepage":"https://code.visualstudio.com/","repo_url":"https://github.com/microsoft/vscode","description":"A code editor redefined and optimized for building and debugging modern web and cloud applications.","url":"https://junglewise.ai/threats/technologies/visual-studio-code"},"most_severe":[{"cve":"CVE-2026-81376","cvss":9.6,"epss":0.0082,"slug":"cve-2026-81376-microsoft-visual-studio-code-security-feature-bypass-via","title":"Microsoft Visual Studio Code security feature bypass via incomplete comparison","severity":"critical","exploited":false,"published_at":"2026-09-08T18:20:53.813+00:00","url":"https://junglewise.ai/threats/cve-2026-81376-microsoft-visual-studio-code-security-feature-bypass-via"},{"cve":"CVE-2026-47281","cvss":9.6,"slug":"cve-2026-47281-microsoft-visual-studio-code-privilege-escalation-via-improper","title":"Microsoft Visual Studio Code privilege escalation via improper input validation","severity":"critical","exploited":false,"published_at":"2026-06-09T17:17:33.95+00:00","url":"https://junglewise.ai/threats/cve-2026-47281-microsoft-visual-studio-code-privilege-escalation-via-improper"},{"cve":"CVE-2026-69320","cvss":8.8,"epss":0.0086,"slug":"cve-2026-69320-microsoft-visual-studio-code-os-command-injection","title":"Microsoft Visual Studio Code OS command injection","severity":"high","exploited":false,"published_at":"2026-08-11T17:19:07.127+00:00","url":"https://junglewise.ai/threats/cve-2026-69320-microsoft-visual-studio-code-os-command-injection"},{"cve":"CVE-2026-41109","cvss":8.8,"epss":0.0086,"slug":"cve-2026-41109-microsoft-visual-studio-and-github-copilot-injection","title":"Microsoft Visual Studio and GitHub Copilot Injection Vulnerability","severity":"high","exploited":false,"published_at":"2026-05-12T18:17:22.21+00:00","url":"https://junglewise.ai/threats/cve-2026-41109-microsoft-visual-studio-and-github-copilot-injection"},{"cve":"CVE-2026-70336","cvss":8.8,"epss":0.0082,"slug":"cve-2026-70336-improper-control-of-generation-of-code-code-injection-in-visual","title":"Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a netwo","severity":"high","exploited":false,"published_at":"2026-08-11T17:19:11.277+00:00","url":"https://junglewise.ai/threats/cve-2026-70336-improper-control-of-generation-of-code-code-injection-in-visual"},{"cve":"CVE-2026-78462","cvss":8.8,"epss":0.0076,"slug":"cve-2026-78462-microsoft-visual-studio-code-authorization-bypass-in-user","title":"Microsoft Visual Studio Code authorization bypass in user-controlled key","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:44.67+00:00","url":"https://junglewise.ai/threats/cve-2026-78462-microsoft-visual-studio-code-authorization-bypass-in-user"},{"cve":"CVE-2026-57102","cvss":8.8,"slug":"cve-2026-57102-microsoft-visual-studio-code-security-feature-bypass","title":"Microsoft Visual Studio Code security feature bypass","severity":"high","exploited":false,"published_at":"2026-07-14T18:18:34.977+00:00","url":"https://junglewise.ai/threats/cve-2026-57102-microsoft-visual-studio-code-security-feature-bypass"},{"cve":"CVE-2026-41613","cvss":8.8,"slug":"cve-2026-41613-microsoft-visual-studio-code-session-fixation-privilege","title":"Microsoft Visual Studio Code session fixation privilege escalation","severity":"high","exploited":false,"published_at":"2026-05-12T18:17:23.237+00:00","url":"https://junglewise.ai/threats/cve-2026-41613-microsoft-visual-studio-code-session-fixation-privilege"},{"cve":"CVE-2026-50520","cvss":8.4,"slug":"cve-2026-50520-microsoft-visual-studio-code-command-injection","title":"Microsoft Visual Studio Code command injection","severity":"high","exploited":false,"published_at":"2026-07-14T17:17:01.42+00:00","url":"https://junglewise.ai/threats/cve-2026-50520-microsoft-visual-studio-code-command-injection"},{"cve":"CVE-2026-45482","cvss":8.4,"slug":"cve-2026-45482-microsoft-visual-studio-code-and-github-copilot-path-traversal","title":"Microsoft Visual Studio Code and GitHub Copilot path traversal","severity":"high","exploited":false,"published_at":"2026-06-09T17:17:22.587+00:00","url":"https://junglewise.ai/threats/cve-2026-45482-microsoft-visual-studio-code-and-github-copilot-path-traversal"}],"generated_at":"2026-09-28T03:07:00.154823+00:00"}