Veille CVE

Juin 2026

8 CVE

  1. CVE-2026-50519 7.5 Élevée

    Microsoft GitHub Copilot Chat

    Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  2. CVE-2026-48569 5.5 Moyenne

    Microsoft Visual Studio Code

    Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  3. CVE-2026-47292 7.8 Élevée

    Microsoft Visual Studio Code - MSSQL Extension · Microsoft visual studio code

    Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

  4. CVE-2026-47287 6.5 Moyenne

    Microsoft Visual Studio Code

    Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.

  5. CVE-2026-47284 6.5 Moyenne

    Microsoft Visual Studio Code

    Exposure of sensitive information to an unauthorized actor in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  6. CVE-2026-47281 9.6 Critique

    Microsoft Visual Studio Code

    Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

  7. CVE-2026-45482 8.4 Élevée

    Microsoft Visual Studio Code CoPilot Chat Extension · Microsoft visual studio code

    Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  8. CVE-2026-40376 8.1 Élevée

    Microsoft Visual Studio Code

    Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.