Sploitus

10 exploited vulnerabilities in Visual Studio Code

Vulnerabilities with publicly known exploits

Vendors
Microsoft, WordPress, Gitkraken, Snyk, Red Os, Amazon
With known exploits
10
Affected Gitkraken Gitlens versions
< 14.0.0
Affected Microsoft Visual Studio Code versions
All versions

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2022-30129
CVSS 9.3 HIGH 2022-05-10FIX AVAILABLE
CVE-2025-65715
CVSS 7.8 HIGH 2026-02-16FIX AVAILABLE
CVE-2023-46944 3 exploits
CVSS 7.8 HIGH 2023-06-07FIX AVAILABLE
GitLens Git Local Configuration Execution ExploitGitLens Git Local Configuration Execution
CVE-2022-40764
CVSS 7.8 HIGH 2022-10-03FIX AVAILABLE
CVE-2022-41034 3 exploits
CVSS 7.8 HIGH 2022-10-11
VSCode ipynb Remote Code Execution ExploitVSCode ipynb Remote Development RCE
CVE-2021-43891
CVSS 7.8 HIGH 2021-12-15
CVE-2019-1414 1 exploit
CVSS 7.8 HIGH 2019-10-17
📄 Visual Studio 1.39.0 Remote Debugger
CVE-2024-1569
CVSS 7.5 HIGH 2024-02-15
CVE-2025-8217 1 exploit
CVSS 5.1 MEDIUM 2025-07-30FIX AVAILABLE
Exploit for CVE-2025-6202
CVE-2021-43908 1 exploit
CVSS 4.3 MEDIUM 2021-12-14
Exploit for CVE-2021-43908