Visual Studio Code vulnerabilities

Visual Studio Code has a missing authorization vulnerability that allows an unauthorized attacker to execute code over a network.

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.

Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Path traversal vulnerability in Visual Studio Code allows an authorized attacker to disclose information over a network.

A vulnerability in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network using session fixation.

Visual Studio Code has improper neutralization of script-related HTML tags, leading to basic XSS vulnerability. This allows an unauthorized attacker to execute code locally.

Visual Studio Code is affected by a path traversal vulnerability due to improper limitation of a pathname to a restricted directory. This allows an unauthorized attacker to execute code over a network.

Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

Visual Studio Code contains a remote code execution vulnerability. An attacker could exploit this flaw to execute arbitrary code in the context of the user.

Remote code execution vulnerability in Visual Studio Code when the Python extension loads workspace settings from a notebook file. An attacker could run arbitrary code in the context of the current user, potentially taking control of the system if the user has administrative rights.

Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Path traversal vulnerability in Visual Studio Code. An unauthorized attacker can perform tampering over a network.

Server-side request forgery (SSRF) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Inconsistent interpretation of HTTP requests ('HTTP request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

A code injection vulnerability in Visual Studio Code allows an unauthorized attacker to execute code over a network.

OS command injection vulnerability in Visual Studio Code. An unauthorized attacker can execute code remotely over the network.

Failing open vulnerability in Visual Studio Code. An unauthorized attacker can bypass a security feature over the network.

Incorrect authorization in Visual Studio Code. An unauthorized attacker can bypass a security feature locally.

A vulnerability in Visual Studio Code is due to missing authorization, allowing an unauthorized attacker to execute code over a network.

A vulnerability in Visual Studio Code involves an authorization bypass through a user-controlled key, allowing an unauthorized attacker to bypass a security feature locally.

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

A vulnerability in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network by including functionality from an untrusted control sphere.

An XSS vulnerability in Visual Studio Code allows an unauthorized attacker to locally bypass a security feature due to improper input neutralization during web page generation.

A command injection vulnerability in Visual Studio Code allows an unauthorized attacker to execute code locally by failing to properly neutralize special elements used in commands.

A path traversal vulnerability in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

A vulnerability in Visual Studio Code due to improper input validation allows an unauthorized attacker to bypass a security feature locally.

Vulnerability in Visual Studio Code involving inclusion of functionality from an untrusted control sphere, allowing an unauthorized attacker to elevate privileges locally.

Visual Studio Code contains a relative path traversal vulnerability that allows an unauthorized attacker to perform tampering over a network.

A vulnerability in Visual Studio Code allows an unauthorized attacker to disclose sensitive information over a network.

Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

A vulnerability in Visual Studio Code allows for spoofing, which may lead to unauthorized access to user data. An attacker can exploit this flaw to mislead the user into performing unsafe actions.

Visual Studio Code Elevation of Privilege Vulnerability.

Visual Studio Code Spoofing Vulnerability

Visual Studio Code contains an Elevation of Privilege Vulnerability that could allow an attacker to gain elevated privileges on the system.

Spoofing vulnerability in Visual Studio Code. An attacker could impersonate a trusted source, potentially leading to display of false information or tricking users into performing unwanted actions.

Remote code execution vulnerability in Visual Studio Code. An attacker could exploit this flaw to execute arbitrary code in the user's context.

A vulnerability in Visual Studio Code allows remote code execution (RCE).

Remote code execution vulnerability in Visual Studio Code. Allows an attacker to execute arbitrary code on the victim's system.