Veille CVE

Mercredi 14 octobre 2026

5 CVE

Critique 0 Élevée 3 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft Visual Studio Code » ✕
  1. CVE-2026-69370 8.8 Élevée

    Microsoft Visual Studio Code

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  2. CVE-2026-103572 8.8 Élevée

    Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.10

    Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.

  3. CVE-2026-102851 6.1 Moyenne

    Microsoft Visual Studio Code

    Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.

  4. CVE-2026-102232 7.0 Élevée

    Microsoft Visual Studio Code

    Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  5. CVE-2026-102229 6.8 Moyenne

    Microsoft Visual Studio Code

    Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.