gcdRadar
products/visual-studio-code

Visual Studio Code

Records
10
Disclosed CVEs
10
Exploited (sev 3–4)
0
CISA KEV flagged
0

Newest record 2026-09-08 · 10 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)

Exploited or KEV-listed · 0

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

No record for Visual Studio Code has confirmed exploitation or a KEV flag.

Disclosures by month · last 24 months

Dec ’2410 disclosed · peak 2 in Nov ’25Nov ’26

Disclosed CVEs, no confirmed exploitation · 10

  1. closed6.5
    GitHub Copilot GitHub Copilot and Visual Studio Code vulnerable to credential disclosure

    Disclosed · since 8 Sep 2026 · CVE-2026-81381

    AI
  2. closed5.3
    GitHub Copilot CVE-2026-81380: GitHub Copilot and VS Code command injection vulnerability

    Disclosed · since 8 Sep 2026 · CVE-2026-81380

    AI
  3. closed7.8
    GitHub Copilot CVE-2026-70335: OS command injection vulnerability in GitHub Copilot and Visual Studio Code

    Disclosed · since 11 Aug 2026 · CVE-2026-70335

    AI
  4. closed6.5
    GitHub Copilot CVE-2026-47282: Credential disclosure vulnerability in GitHub Copilot

    Disclosed · since 14 Jul 2026 · CVE-2026-47282

    AI
  5. closed6.5
    GitHub Copilot CVE-2026-50519: Insecure resource default in GitHub Copilot and VS Code allows info disclosure

    Disclosed · since 19 Jun 2026 · CVE-2026-50519

    AI
  6. closed8.4
    GitHub Copilot CVE-2026-45482: Path Traversal Vulnerability in GitHub Copilot and VS Code

    Disclosed · since 9 Jun 2026 · CVE-2026-45482

    AI
  7. closed5.7
    GitHub Copilot CVE-2026-23653: Command Injection Flaw in GitHub Copilot and VS Code

    Disclosed · since 14 Apr 2026 · CVE-2026-23653

    AI
  8. closed8.8
    GitHub Copilot CVE-2026-21518: Command Injection Vulnerability in GitHub Copilot and VS Code

    Disclosed · since 10 Feb 2026 · CVE-2026-21518

    AI
  9. closed5.7
    GitHub Copilot CVE-2025-64660: GitHub Copilot and VS Code Access Control Vulnerability

    Disclosed · since 20 Nov 2025 · CVE-2025-64660

    AI
  10. closed5.0
    GitHub Copilot CVE-2025-62453: GitHub Copilot and VS Code Generative AI Output Validation Flaw

    Disclosed · since 11 Nov 2025 · CVE-2025-62453

    AI

Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.