Microsoft Visual Studio Code
Moderate fix1 remedy
cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*, +6 more
Moderate fix1 remedy
Visual Studio Code Remote Code Execution Vulnerability
Vulnerability
Patched
A vulnerability allowing improper neutralization of script-related HTML tags, leading to basic cross-site scripting (XSS), has been identified in Visual Studio Code. This issue allows an unauthorized attacker to execute code locally. The vulnerability affects Visual Studio Code versions prior to 1.119.1.
Impact
Exploitation of this vulnerability could lead to unauthorized local code execution.
Remediation
Users are advised to update to Visual Studio Code version 1.119.1 or later. The security update can be downloaded from the Visual Studio Code website.
Added: May 12, 2026, 7:17 PM
Updated: May 12, 2026, 7:17 PM
Vulnerability Rating
Custom Algorithm
spread
6.6impact
7.5exploitability
4.2remediation
7.7relevance
8.1threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.