# Microsoft Visual Studio Code


- [CVE-2026-81376](https://insights.sbomify.com/CVE-2026-81376/): Visual Studio Code Security Feature Bypass Vulnerability (critical 9.6)
- [CVE-2026-47281](https://insights.sbomify.com/CVE-2026-47281/): Visual Studio Code Elevation of Privilege Vulnerability (critical 9.6)
- [CVE-2026-78462](https://insights.sbomify.com/CVE-2026-78462/): Visual Studio Code Security Feature Bypass Vulnerability (high 8.8)
- [CVE-2026-59113](https://insights.sbomify.com/CVE-2026-59113/): Visual Studio Code Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69320](https://insights.sbomify.com/CVE-2026-69320/): Visual Studio Code Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-70336](https://insights.sbomify.com/CVE-2026-70336/): Visual Studio Code Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-57102](https://insights.sbomify.com/CVE-2026-57102/): Visual Studio Code Security Feature Bypass Vulnerability (high 8.8)
- [CVE-2026-41109](https://insights.sbomify.com/CVE-2026-41109/): GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability (high 8.8)
- [CVE-2026-41613](https://insights.sbomify.com/CVE-2026-41613/): Visual Studio Code Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-21518](https://insights.sbomify.com/CVE-2026-21518/): GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability (high 8.8)
- [CVE-2025-55319](https://insights.sbomify.com/CVE-2025-55319/): Agentic AI and Visual Studio Code Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-43488](https://insights.sbomify.com/CVE-2024-43488/): Visual Studio Code extension for Arduino Remote Code Execution Vulnerability (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/microsoft/visual-studio-code/