Multiple vulnerabilities in Microsoft Visual Studio Code

Description

Multiple vulnerabilities were found in Microsoft Visual Studio Code. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Visual Studio Code can be exploited remotely to execute arbitrary code.
2. A security feature bypass vulnerability in Visual Studio Code can be exploited remotely to bypass security restrictions.
3. An information disclosure vulnerability in Visual Studio Code can be exploited remotely to obtain sensitive information.
4. An elevation of privilege vulnerability in GitHub Copilot and Visual Studio Code can be exploited remotely to gain privileges.

Original advisories

• CVE-2026-69320

• CVE-2026-69278
• CVE-2026-47285
• CVE-2026-70335
• CVE-2026-69306
• CVE-2026-59113
• CVE-2026-70336
• CVE-2026-58650

Exploitation

Related products

• Microsoft-Visual-Studio
• Visual-Studio-Code
• Microsoft-Visual-Studio-Code

CVE list

• CVE-2026-47285
  high
• CVE-2026-58650
  critical
• CVE-2026-59113
  critical
• CVE-2026-69278
  critical
• CVE-2026-69306
  critical
• CVE-2026-69320
  critical
• CVE-2026-70335
  critical
• CVE-2026-70336
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com