Visual Studio Code vulnerabilities

A vulnerability in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network using session fixation.

Visual Studio Code has improper neutralization of script-related HTML tags, leading to basic XSS vulnerability. This allows an unauthorized attacker to execute code locally.

Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

Remote code execution vulnerability in Visual Studio Code when the Python extension loads workspace settings from a notebook file. An attacker could run arbitrary code in the context of the current user, potentially taking control of the system if the user has administrative rights.

A code injection vulnerability in Visual Studio Code allows an unauthorized attacker to execute code over a network.

OS command injection vulnerability in Visual Studio Code. An unauthorized attacker can execute code remotely over the network.

Failing open vulnerability in Visual Studio Code. An unauthorized attacker can bypass a security feature over the network.

Incorrect authorization in Visual Studio Code. An unauthorized attacker can bypass a security feature locally.

A vulnerability in Visual Studio Code is due to missing authorization, allowing an unauthorized attacker to execute code over a network.

A vulnerability in Visual Studio Code involves an authorization bypass through a user-controlled key, allowing an unauthorized attacker to bypass a security feature locally.

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

A vulnerability in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network by including functionality from an untrusted control sphere.

An XSS vulnerability in Visual Studio Code allows an unauthorized attacker to locally bypass a security feature due to improper input neutralization during web page generation.

A command injection vulnerability in Visual Studio Code allows an unauthorized attacker to execute code locally by failing to properly neutralize special elements used in commands.

A path traversal vulnerability in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

A vulnerability in Visual Studio Code due to improper input validation allows an unauthorized attacker to bypass a security feature locally.

Vulnerability in Visual Studio Code involving inclusion of functionality from an untrusted control sphere, allowing an unauthorized attacker to elevate privileges locally.

Visual Studio Code contains a relative path traversal vulnerability that allows an unauthorized attacker to perform tampering over a network.

A vulnerability in Visual Studio Code allows an unauthorized attacker to disclose sensitive information over a network.

Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

A vulnerability in Visual Studio Code allows for spoofing, which may lead to unauthorized access to user data. An attacker can exploit this flaw to mislead the user into performing unsafe actions.

Visual Studio Code contains an Elevation of Privilege Vulnerability that could allow an attacker to gain elevated privileges on the system.

Spoofing vulnerability in Visual Studio Code. An attacker could impersonate a trusted source, potentially leading to display of false information or tricking users into performing unwanted actions.

Remote code execution vulnerability in Visual Studio Code. An attacker could exploit this flaw to execute arbitrary code in the user's context.

A vulnerability in Visual Studio Code allows remote code execution (RCE).

Remote code execution vulnerability in Visual Studio Code. Allows an attacker to execute arbitrary code on the victim's system.