Veille CVE

Jeudi 15 octobre 2026

4 CVE

  1. CVE-2026-70098 8.8 Élevée

    Microsoft Visual Studio Code

    Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  2. CVE-2026-102238 9.6 Critique

    Microsoft Visual Studio Code

    Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  3. CVE-2026-102235 8.8 Élevée

    Microsoft Visual Studio Code

    Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  4. CVE-2026-102234 7.4 Élevée

    Microsoft Visual Studio Code

    Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.