Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2753▲ 26 respecto a la semana anterior
Críticas / altas1468▲ 333 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)85▼ 441 respecto a la semana anterior
101 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7.1) | 0.75% | — | Microsoft Visual Studio Code | 13/5/2025 | 17/6/2026 | Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | |
| Analizada | Media (6.8) | 0.45% | — | Microsoft Visual Studio Code | 12/4/2025 | 17/6/2026 | Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.3) | 0.56% | — | Microsoft Visual Studio Code | 11/3/2025 | 17/6/2026 | Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally. | |
| Analizada | Alta (7.3) | 0.71% | — | Microsoft Visual Studio Code | 11/2/2025 | 17/6/2026 | Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability | |
| Analizada | Alta (7.3) | 0.76% | — | Microsoft Visual Studio Code | 11/2/2025 | 17/6/2026 | Visual Studio Code Elevation of Privilege Vulnerability | |
| Modificada | Alta (7.1) | 1.1% | — | Microsoft Visual Studio Code | 8/10/2024 | 17/6/2026 | Visual Studio Code for Linux Remote Code Execution Vulnerability | |
| Analizada | Crítica (9.8) | 1.2% | — | Microsoft Visual Studio Code | 8/10/2024 | 17/6/2026 | Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector. | |
| Aplazada | Alta (7.1) | 0.77% | — | WIZ CodeAIMicrosoft Visual Studio CodeAI | 1/10/2024 | 17/6/2026 | Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz (legacy) Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder" within Visual… | |
| Analizada | Alta (8.8) | 1.9% | — | Microsoft Visual Studio Code | 12/3/2024 | 17/6/2026 | Visual Studio Code Elevation of Privilege Vulnerability | |
| Modificada | Alta (7.8) | 1.0% | — | Microsoft Visual Studio Code | 12/9/2023 | 17/6/2026 | Visual Studio Code Remote Code Execution Vulnerability | |
| Modificada | Media (6.6) | 1.3% | — | Microsoft Visual Studio Code | 14/6/2023 | 17/6/2026 | Visual Studio Code Spoofing Vulnerability | |
| Modificada | Media (6.6) | 0.88% | — | Microsoft Visual Studio Code | 9/5/2023 | 17/6/2026 | Visual Studio Code Spoofing Vulnerability | |
| Modificada | Alta (7.8) | 1.1% | — | Microsoft Visual Studio Code | 11/4/2023 | 17/6/2026 | Visual Studio Code Remote Code Execution Vulnerability | |
| Modificada | Alta (8.2) | 0.57% | — | Jenkins Visual Studio Code Metrics | 2/4/2023 | 17/6/2026 | Jenkins Visual Studio Code Metrics Plugin 1.7 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. | |
| Modificada | Alta (7.8) | 2.3% | — | Microsoft Visual Studio Code | 10/1/2023 | 17/6/2026 | Visual Studio Code Remote Code Execution Vulnerability | |
| Modificada | Alta (7.4) | 2.0% | — | Microsoft Visual Studio Code | 11/10/2022 | 17/6/2026 | Visual Studio Code Information Disclosure Vulnerability | |
| Modificada | Alta (7.8) | 67% | — | Microsoft Visual Studio Code | 11/10/2022 | 17/6/2026 | Visual Studio Code Remote Code Execution Vulnerability | |
| Modificada | Alta (7.3) | 1.1% | — | Microsoft Visual Studio Code | 13/9/2022 | 17/6/2026 | Visual Studio Code Elevation of Privilege Vulnerability | |
| Modificada | Alta (8.8) | 41% | — | Microsoft Visual Studio Code | 10/5/2022 | 17/6/2026 | Visual Studio Code Remote Code Execution Vulnerability | |
| Modificada | Alta (7.8) | 0.60% | — | Microsoft Visual Studio Code | 15/4/2022 | 17/6/2026 | Visual Studio Code Elevation of Privilege Vulnerability | |
| Modificada | Media (5.5) | 1.6% | — | Microsoft Visual Studio Code | 9/3/2022 | 17/6/2026 | Visual Studio Code Spoofing Vulnerability | |
| Modificada | Alta (8.1) | 2.1% | — | Microsoft Visual Studio Code | 9/2/2022 | 17/6/2026 | Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability | |
| Modificada | Media (4.3) | 2.7% | — | Microsoft Visual Studio Code | 15/12/2021 | 17/6/2026 | Visual Studio Code Spoofing Vulnerability | |
| Modificada | Alta (7.8) | 13% | — | Microsoft Visual Studio Code | 15/12/2021 | 17/6/2026 | Visual Studio Code Remote Code Execution Vulnerability | |
| Modificada | Alta (7.8) | 0.54% | — | Microsoft Visual Studio Code | 10/11/2021 | 19/8/2026 | Visual Studio Code Elevation of Privilege Vulnerability |