CVE-2025-62449

Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Github Copilot Chat Visual Studio Visual Studio Code Copilot Chat Extension

CVE-2025-24039

Visual Studio Code Elevation of Privilege Vulnerability

Visual Studio Code Elevation of Privilege Vulnerability

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio Code

CVE-2025-26631

Visual Studio Code Elevation of Privilege Vulnerability

Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio Code

CVE-2025-21264

Visual Studio Code Security Feature Bypass Vulnerability

Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio Code Visual Studio Code Copilot Chat Extension

CVE-2025-68120

Unexpected untrusted code execution in github.com/golang/vscode-go

To prevent unexpected untrusted code execution, the Visual Studio Code Go extension is now disabled in Restricted Mode.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Go Microsoft

Products

Go Visual Studio Code

CVE-2022-24526

Visual Studio Code Spoofing Vulnerability

Visual Studio Code Spoofing Vulnerability

CVSS 3.1 · 6.1 Medium EPSS 1.6% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio Code

CVE-2023-36742

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 1.0% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio Code

CVE-2020-17163

Visual Studio Code Python Extension Remote Code Execution Vulnerability

Visual Studio Code Python Extension Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Python Visual Studio Code

CVE-2020-17159

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 3.3% KEV · Not listed

Vendors

Microsoft Redhat

Products

Visual Studio Code Language Support For Java

CVE-2020-17150

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 3.2% KEV · Not listed

Vendors

Microsoft

Products

Tslint Visual Studio Code

CVE-2020-17148

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 3.8% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio Code

CVE-2021-26700

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 6.0% KEV · Not listed

Vendors

Microsoft

Products

Npm Visual Studio Code Npm-script Extension

CVE-2023-29338

Visual Studio Code Spoofing Vulnerability

Visual Studio Code Spoofing Vulnerability

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio Code

CVE-2024-26165

Visual Studio Code Elevation of Privilege Vulnerability

Visual Studio Code Elevation of Privilege Vulnerability

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio Code

CVE-2022-38020

Visual Studio Code Elevation of Privilege Vulnerability

Visual Studio Code Elevation of Privilege Vulnerability

CVSS 3.1 · 7.3 High EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio Code

CVE-2023-24893

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio Code

CVE-2022-41034

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 67.5% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio Code

CVE-2022-30129

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 41.6% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio Code

CVE-2023-36867

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Github Microsoft

Products

Pull Requests And Issues Visual Studio Code Github Pull Requests And Issues Extension

CVE-2023-33144

Visual Studio Code Spoofing Vulnerability

Visual Studio Code Spoofing Vulnerability

CVSS 3.1 · 6.6 Medium EPSS 1.3% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio Code