Veille CVE

Vendredi 25 septembre 2026

7 CVE

Critique 0 Élevée 6 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft visual studio code » ✕
  1. CVE-2026-70336 8.8 Élevée

    Microsoft Visual Studio Code

    Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  2. CVE-2026-70335 7.8 Élevée

    Microsoft Visual Studio Code

    Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

  3. CVE-2026-69320 8.8 Élevée

    Microsoft Visual Studio Code

    Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  4. CVE-2026-69306 8.2 Élevée

    Microsoft Visual Studio Code

    Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  5. CVE-2026-69278 7.8 Élevée

    Microsoft Visual Studio Code

    Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  6. CVE-2026-58650 7.8 Élevée

    Microsoft Visual Studio Code

    Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  7. CVE-2026-47285 6.5 Moyenne

    Microsoft Visual Studio Code

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.