CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 08/09/2026 |
| CVE-2026-81379 | 高8.2 | Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 08/09/2026 |
| CVE-2026-81378 | 高8.2 | Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 08/09/2026 |
| CVE-2026-81377 | 中6.5 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network. | 08/09/2026 |
| CVE-2026-81376 | 緊急9.6 | Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 08/09/2026 |
| CVE-2026-81357 | 高8.2 | Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 08/09/2026 |
| CVE-2026-81356 | 高8.2 | Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 08/09/2026 |
| CVE-2026-78462 | 高8.8 | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 08/09/2026 |
| CVE-2026-78461 | 高7.4 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 08/09/2026 |
| CVE-2026-70334 | 高7.8 | Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 08/09/2026 |
| CVE-2026-70336 | 高8.8 | Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 11/08/2026 |
| CVE-2026-70335 | 高7.8 | Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally. | 11/08/2026 |
| CVE-2026-69320 | 高8.8 | Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 11/08/2026 |
| CVE-2026-69306 | 高8.2 | Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 11/08/2026 |
| CVE-2026-69278 | 高7.8 | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 11/08/2026 |
| CVE-2026-59113 | 高8.8 | Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 11/08/2026 |
| CVE-2026-58650 | 高7.8 | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 11/08/2026 |