OVERCLOCK.news
Back to security Live
security

CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability

Updated an acknowledgement. This is an informational change only.

Microsoft  /  7 days ago
BlueskyXRedditMail
Revised 204 changes recorded since we first saw this, across 17 outlets
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.”

    CVE-2026-40376 Visual Studio Code Elevation of Privilege Vulnerability

    Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

  2. Version 55 Summary changed

    1 new sentence, beginning: “Updated the Security Updates Build Number”

    CVE-2026-40376 Visual Studio Code Elevation of Privilege Vulnerability

    Updated the Security Updates Build Number

  3. Version 54 Summary changed

    1 new sentence, beginning: “Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.”

    CVE-2026-40376 Visual Studio Code Elevation of Privilege Vulnerability

    Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

  4. Version 53 Summary changed

    1 new sentence, beginning: “Updated the Security Updates Build Number”

    CVE-2026-40376 Visual Studio Code Elevation of Privilege Vulnerability

    Updated the Security Updates Build Number

  5. Version 52 Summary changed

    1 new sentence, beginning: “Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.”

    CVE-2026-40376 Visual Studio Code Elevation of Privilege Vulnerability

    Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

  6. Version 51 Summary changed

    1 new sentence, beginning: “Updated the Security Updates Build Number”

    CVE-2026-40376 Visual Studio Code Elevation of Privilege Vulnerability

    Updated the Security Updates Build Number

  7. Version 50 Summary changed

    1 new sentence, beginning: “Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.”

    CVE-2026-40376 Visual Studio Code Elevation of Privilege Vulnerability

    Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

  8. Version 49 Summary changed

    1 new sentence, beginning: “Updated the Security Updates Build Number”

    CVE-2026-40376 Visual Studio Code Elevation of Privilege Vulnerability

    Updated the Security Updates Build Number

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-40376 Visual Studio Code Elevation of Privilege Vulnerability

    Updated the Security Updates Build Number

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.”

    CVE-2026-45459 Microsoft Excel Security Feature Bypass Vulnerability

    Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.

  2. Version 55 Summary changed

    4 new sentences, beginning: “Microsoft is announcing the availability of the security updates for Microsoft Office for Mac.”

    CVE-2026-45459 Microsoft Excel Security Feature Bypass Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

  3. Version 54 Summary changed

    1 new sentence, beginning: “Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.”

    CVE-2026-45459 Microsoft Excel Security Feature Bypass Vulnerability

    Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.

  4. Version 53 Summary changed

    4 new sentences, beginning: “Microsoft is announcing the availability of the security updates for Microsoft Office for Mac.”

    CVE-2026-45459 Microsoft Excel Security Feature Bypass Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

  5. Version 52 Summary changed

    1 new sentence, beginning: “Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.”

    CVE-2026-45459 Microsoft Excel Security Feature Bypass Vulnerability

    Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.

  6. Version 51 Summary changed

    4 new sentences, beginning: “Microsoft is announcing the availability of the security updates for Microsoft Office for Mac.”

    CVE-2026-45459 Microsoft Excel Security Feature Bypass Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

  7. Version 50 Summary changed

    1 new sentence, beginning: “Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.”

    CVE-2026-45459 Microsoft Excel Security Feature Bypass Vulnerability

    Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.

  8. Version 49 Summary changed

    4 new sentences, beginning: “Microsoft is announcing the availability of the security updates for Microsoft Office for Mac.”

    CVE-2026-45459 Microsoft Excel Security Feature Bypass Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-45459 Microsoft Excel Security Feature Bypass Vulnerability

    Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Headline and summary changed

    The headline was rewritten. 1 new sentence, beginning: “Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows…”

    CVE-2026-45482 Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability

    Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  2. Version 55 Headline and summary changed

    The headline was rewritten. 1 new sentence, beginning: “Updated the Security Updates Build Number and Title as the Chat extention is now merged into Visual Studio Code”

    CVE-2026-45482 Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability

    Updated the Security Updates Build Number and Title as the Chat extention is now merged into Visual Studio Code

  3. Version 54 Headline and summary changed

    The headline was rewritten. 1 new sentence, beginning: “Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows…”

    CVE-2026-45482 Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability

    Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  4. Version 53 Headline and summary changed

    The headline was rewritten. 1 new sentence, beginning: “Updated the Security Updates Build Number and Title as the Chat extention is now merged into Visual Studio Code”

    CVE-2026-45482 Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability

    Updated the Security Updates Build Number and Title as the Chat extention is now merged into Visual Studio Code

  5. Version 52 Headline and summary changed

    The headline was rewritten. 1 new sentence, beginning: “Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows…”

    CVE-2026-45482 Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability

    Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  6. Version 51 Headline and summary changed

    The headline was rewritten. 1 new sentence, beginning: “Updated the Security Updates Build Number and Title as the Chat extention is now merged into Visual Studio Code”

    CVE-2026-45482 Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability

    Updated the Security Updates Build Number and Title as the Chat extention is now merged into Visual Studio Code

  7. Version 50 Headline and summary changed

    The headline was rewritten. 1 new sentence, beginning: “Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows…”

    CVE-2026-45482 Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability

    Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  8. Version 49 Headline and summary changed

    The headline was rewritten. 1 new sentence, beginning: “Updated the Security Updates Build Number and Title as the Chat extention is now merged into Visual Studio Code”

    CVE-2026-45482 Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability

    Updated the Security Updates Build Number and Title as the Chat extention is now merged into Visual Studio Code

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-45482 Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability

    Updated the Security Updates Build Number and Title as the Chat extention is now merged into Visual Studio Code

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    2 new sentences, beginning: “Added links to June 2026 Windows security updates.”

    CVE-2026-45585 Windows BitLocker Security Feature Bypass Vulnerability

    Added links to June 2026 Windows security updates. Microsoft recommends installing this updates as soon as possible.

  2. Version 55 Summary changed

    2 new sentences, beginning: “Updated product information in the Software Update table.”

    CVE-2026-45585 Windows BitLocker Security Feature Bypass Vulnerability

    Updated product information in the Software Update table. This is an informational change only.

  3. Version 54 Summary changed

    2 new sentences, beginning: “Added links to June 2026 Windows security updates.”

    CVE-2026-45585 Windows BitLocker Security Feature Bypass Vulnerability

    Added links to June 2026 Windows security updates. Microsoft recommends installing this updates as soon as possible.

  4. Version 53 Summary changed

    2 new sentences, beginning: “Updated product information in the Software Update table.”

    CVE-2026-45585 Windows BitLocker Security Feature Bypass Vulnerability

    Updated product information in the Software Update table. This is an informational change only.

  5. Version 52 Summary changed

    2 new sentences, beginning: “Added links to June 2026 Windows security updates.”

    CVE-2026-45585 Windows BitLocker Security Feature Bypass Vulnerability

    Added links to June 2026 Windows security updates. Microsoft recommends installing this updates as soon as possible.

  6. Version 51 Summary changed

    2 new sentences, beginning: “Updated product information in the Software Update table.”

    CVE-2026-45585 Windows BitLocker Security Feature Bypass Vulnerability

    Updated product information in the Software Update table. This is an informational change only.

  7. Version 50 Summary changed

    2 new sentences, beginning: “Added links to June 2026 Windows security updates.”

    CVE-2026-45585 Windows BitLocker Security Feature Bypass Vulnerability

    Added links to June 2026 Windows security updates. Microsoft recommends installing this updates as soon as possible.

  8. Version 49 Summary changed

    2 new sentences, beginning: “Updated product information in the Software Update table.”

    CVE-2026-45585 Windows BitLocker Security Feature Bypass Vulnerability

    Updated product information in the Software Update table. This is an informational change only.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-45585 Windows BitLocker Security Feature Bypass Vulnerability

    Updated product information in the Software Update table. This is an informational change only.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an…”

    CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  2. Version 55 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability

    Affected software updated with new package information.

  3. Version 54 Summary changed

    1 new sentence, beginning: “Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an…”

    CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  4. Version 53 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability

    Affected software updated with new package information.

  5. Version 52 Summary changed

    1 new sentence, beginning: “Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an…”

    CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  6. Version 51 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability

    Affected software updated with new package information.

  7. Version 50 Summary changed

    1 new sentence, beginning: “Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an…”

    CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  8. Version 49 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability

    Affected software updated with new package information.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability

    Affected software updated with new package information.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Improper verification of cryptographic signature in.NET allows an unauthorized attacker to bypass a security feature over a…”

    CVE-2026-47304 .NET Security Feature Bypass Vulnerability

    Improper verification of cryptographic signature in.NET allows an unauthorized attacker to bypass a security feature over a network.

  2. Version 55 Summary changed

    2 new sentences, beginning: “Updated product information in the Software Update table.”

    CVE-2026-47304 .NET Security Feature Bypass Vulnerability

    Updated product information in the Software Update table. This is an informational change only.

  3. Version 54 Summary changed

    1 new sentence, beginning: “Improper verification of cryptographic signature in.NET allows an unauthorized attacker to bypass a security feature over a…”

    CVE-2026-47304 .NET Security Feature Bypass Vulnerability

    Improper verification of cryptographic signature in.NET allows an unauthorized attacker to bypass a security feature over a network.

  4. Version 53 Summary changed

    2 new sentences, beginning: “Updated product information in the Software Update table.”

    CVE-2026-47304 .NET Security Feature Bypass Vulnerability

    Updated product information in the Software Update table. This is an informational change only.

  5. Version 52 Summary changed

    1 new sentence, beginning: “Improper verification of cryptographic signature in.NET allows an unauthorized attacker to bypass a security feature over a…”

    CVE-2026-47304 .NET Security Feature Bypass Vulnerability

    Improper verification of cryptographic signature in.NET allows an unauthorized attacker to bypass a security feature over a network.

  6. Version 51 Summary changed

    2 new sentences, beginning: “Updated product information in the Software Update table.”

    CVE-2026-47304 .NET Security Feature Bypass Vulnerability

    Updated product information in the Software Update table. This is an informational change only.

  7. Version 50 Summary changed

    1 new sentence, beginning: “Improper verification of cryptographic signature in.NET allows an unauthorized attacker to bypass a security feature over a…”

    CVE-2026-47304 .NET Security Feature Bypass Vulnerability

    Improper verification of cryptographic signature in.NET allows an unauthorized attacker to bypass a security feature over a network.

  8. Version 49 Summary changed

    2 new sentences, beginning: “Updated product information in the Software Update table.”

    CVE-2026-47304 .NET Security Feature Bypass Vulnerability

    Updated product information in the Software Update table. This is an informational change only.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-47304 .NET Security Feature Bypass Vulnerability

    Updated product information in the Software Update table. This is an informational change only.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.”

    CVE-2026-48569 Visual Studio Code Security Feature Bypass Vulnerability

    Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  2. Version 55 Summary changed

    1 new sentence, beginning: “Updated the Security Updates Build Number”

    CVE-2026-48569 Visual Studio Code Security Feature Bypass Vulnerability

    Updated the Security Updates Build Number

  3. Version 54 Summary changed

    1 new sentence, beginning: “Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.”

    CVE-2026-48569 Visual Studio Code Security Feature Bypass Vulnerability

    Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  4. Version 53 Summary changed

    1 new sentence, beginning: “Updated the Security Updates Build Number”

    CVE-2026-48569 Visual Studio Code Security Feature Bypass Vulnerability

    Updated the Security Updates Build Number

  5. Version 52 Summary changed

    1 new sentence, beginning: “Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.”

    CVE-2026-48569 Visual Studio Code Security Feature Bypass Vulnerability

    Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  6. Version 51 Summary changed

    1 new sentence, beginning: “Updated the Security Updates Build Number”

    CVE-2026-48569 Visual Studio Code Security Feature Bypass Vulnerability

    Updated the Security Updates Build Number

  7. Version 50 Summary changed

    1 new sentence, beginning: “Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.”

    CVE-2026-48569 Visual Studio Code Security Feature Bypass Vulnerability

    Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  8. Version 49 Summary changed

    1 new sentence, beginning: “Updated the Security Updates Build Number”

    CVE-2026-48569 Visual Studio Code Security Feature Bypass Vulnerability

    Updated the Security Updates Build Number

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-48569 Visual Studio Code Security Feature Bypass Vulnerability

    Updated the Security Updates Build Number

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical…”

    CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability

    Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

  2. Version 55 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability

    Acknowledgement Updated

  3. Version 54 Summary changed

    1 new sentence, beginning: “Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical…”

    CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability

    Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

  4. Version 53 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability

    Acknowledgement Updated

  5. Version 52 Summary changed

    1 new sentence, beginning: “Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical…”

    CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability

    Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

  6. Version 51 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability

    Acknowledgement Updated

  7. Version 50 Summary changed

    1 new sentence, beginning: “Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical…”

    CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability

    Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

  8. Version 49 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability

    Acknowledgement Updated

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability

    Acknowledgement Updated

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    4 new sentences, beginning: “Updated the fixed version information and download link.”

    CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability

    Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Security Updates table. This is an informational change only.

  2. Version 56 Summary changed

    1 new sentence, beginning: “Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized…”

    CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability

    Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.

  3. Version 55 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  4. Version 54 Summary changed

    1 new sentence, beginning: “Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized…”

    CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability

    Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.

  5. Version 53 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  6. Version 52 Summary changed

    1 new sentence, beginning: “Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized…”

    CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability

    Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.

  7. Version 51 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  8. Version 50 Summary changed

    1 new sentence, beginning: “Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized…”

    CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability

    Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability

    Affected software updated with new package information.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security…”

    CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability

    Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  2. Version 55 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  3. Version 54 Summary changed

    1 new sentence, beginning: “Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security…”

    CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability

    Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  4. Version 53 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  5. Version 52 Summary changed

    1 new sentence, beginning: “Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security…”

    CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability

    Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  6. Version 51 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  7. Version 50 Summary changed

    1 new sentence, beginning: “Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security…”

    CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability

    Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  8. Version 49 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability

    Affected software updated with new package information.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    4 new sentences, beginning: “Updated the fixed version information and download link.”

    CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability

    Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Security Updates table. This is an informational change only.

  2. Version 56 Summary changed

    1 new sentence, beginning: “Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.”

    CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability

    Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  3. Version 55 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability

    Affected software updated with new package information.

  4. Version 54 Summary changed

    1 new sentence, beginning: “Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.”

    CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability

    Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  5. Version 53 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability

    Affected software updated with new package information.

  6. Version 52 Summary changed

    1 new sentence, beginning: “Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.”

    CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability

    Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  7. Version 51 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability

    Affected software updated with new package information.

  8. Version 50 Summary changed

    1 new sentence, beginning: “Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.”

    CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability

    Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability

    Affected software updated with new package information.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    4 new sentences, beginning: “Updated the fixed version information and download link.”

    CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability

    Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Security Updates table. This is an informational change only.

  2. Version 84 Summary changed

    1 new sentence, beginning: “No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security…”

    CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability

    No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.

  3. Version 83 Summary changed

    2 new sentences, beginning: “CWE added.”

    CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability

    CWE added. Informational change only.

  4. Version 82 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  5. Version 81 Summary changed

    1 new sentence, beginning: “No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security…”

    CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability

    No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.

  6. Version 80 Summary changed

    2 new sentences, beginning: “CWE added.”

    CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability

    CWE added. Informational change only.

  7. Version 79 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  8. Version 78 Summary changed

    1 new sentence, beginning: “No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security…”

    CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability

    No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability

    Affected software updated with new package information.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.”

    CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability

    Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  2. Version 55 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  3. Version 54 Summary changed

    1 new sentence, beginning: “Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.”

    CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability

    Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  4. Version 53 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  5. Version 52 Summary changed

    1 new sentence, beginning: “Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.”

    CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability

    Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  6. Version 51 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  7. Version 50 Summary changed

    1 new sentence, beginning: “Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.”

    CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability

    Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  8. Version 49 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability

    Affected software updated with new package information.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over…”

    CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability

    Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  2. Version 55 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  3. Version 54 Summary changed

    1 new sentence, beginning: “Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over…”

    CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability

    Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  4. Version 53 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  5. Version 52 Summary changed

    1 new sentence, beginning: “Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over…”

    CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability

    Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  6. Version 51 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  7. Version 50 Summary changed

    1 new sentence, beginning: “Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over…”

    CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability

    Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  8. Version 49 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability

    Affected software updated with new package information.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability

    Affected software updated with new package information.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an…”

    CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability

    Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  2. Version 55 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability

    Affected software updated with new package information.

  3. Version 54 Summary changed

    1 new sentence, beginning: “Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an…”

    CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability

    Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  4. Version 53 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability

    Affected software updated with new package information.

  5. Version 52 Summary changed

    1 new sentence, beginning: “Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an…”

    CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability

    Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  6. Version 51 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability

    Affected software updated with new package information.

  7. Version 50 Summary changed

    1 new sentence, beginning: “Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an…”

    CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability

    Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  8. Version 49 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability

    Affected software updated with new package information.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability

    Affected software updated with new package information.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    1 new sentence, beginning: “Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute…”

    CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability

    Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  2. Version 55 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability

    Affected software updated with new package information.

  3. Version 54 Summary changed

    1 new sentence, beginning: “Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute…”

    CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability

    Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  4. Version 53 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability

    Affected software updated with new package information.

  5. Version 52 Summary changed

    1 new sentence, beginning: “Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute…”

    CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability

    Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  6. Version 51 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability

    Affected software updated with new package information.

  7. Version 50 Summary changed

    1 new sentence, beginning: “Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute…”

    CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability

    Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  8. Version 49 Summary changed

    1 new sentence, beginning: “Affected software updated with new package information.”

    CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability

    Affected software updated with new package information.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability

    Affected software updated with new package information.

Read the current version at Microsoft →
Microsoft 13 versions
  1. Current Summary changed

    2 new sentences, beginning: “Updated an acknowledgement.”

    CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability

    Updated an acknowledgement. This is an informational change only.

  2. Version 84 Summary changed

    1 new sentence, beginning: “Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a…”

    CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability

    Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

  3. Version 83 Summary changed

    1 new sentence, beginning: “The security updates for Powershell have been updated.”

    CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability

    The security updates for Powershell have been updated.

  4. Version 82 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability

    Acknowledgement Updated

  5. Version 81 Summary changed

    1 new sentence, beginning: “Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a…”

    CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability

    Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

  6. Version 80 Summary changed

    1 new sentence, beginning: “The security updates for Powershell have been updated.”

    CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability

    The security updates for Powershell have been updated.

  7. Version 79 Summary changed

    1 new sentence, beginning: “Acknowledgement Updated”

    CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability

    Acknowledgement Updated

  8. Version 78 Summary changed

    1 new sentence, beginning: “Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a…”

    CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability

    Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

  9. 4 earlier versions not shown
  10. As first published

    CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability

    Acknowledgement Updated

Read the current version at Microsoft →

Versions are compared on the headline and summary the publisher puts in their feed. An edit to the body of an article that leaves both untouched will not appear here.

Why am I seeing this Ranked on source trust — Microsoft

It ranks mainly on source trust: Microsoft is the most reliable outlet we track on this subject, and is the only one on the story so far.

It clears the bar without leading strongly on any one factor. A middling score is not a claim that the story is important — only that nothing about it is weak.

Link-outLink-out, because it scores 0.43, below the 0.50 bar for a write-up. Link-out means we point at the publisher and say nothing of our own.

Blended score 0.428 — every figure below is computed, none of it is editorial.
FactorWeightScore ContributionWhere it came from
Corroboration 0.35 0.39 +0.135 32% 1 independent org on the story. Tier-3 aggregators never corroborate — they can show something is circulating, never that it is true.
Source trustleads 0.25 1.00 +0.250 58% Microsoft is the highest-trust source on this story and is first-party — the organisation announcing its own news. Trust is taken from the best source, not averaged.
Pickup rate 0.20 0.00 +0.000 0% One counted organisation, so there is no spread to measure — nothing has picked this up to set a rate.
Freshness 0.20 0.21 +0.043 10% Halves every 10 hours from the newest item on the story. This is the only factor that rewards a story for nothing more than being recent.

Corroboration counts distinct organisations, once each, and only from tiers 1 and 2. Freshness halves every 10 hours, so this ranking is a snapshot and will differ at the next build.

Read the full article at Microsoft →
1independent orgs
43story score
0velocity
100source trust
8337passes seen
Low CVE-2026-70338

Narrow impact or difficult preconditions.

Impact
Security Bypass
Product
Microsoft PowerShell

How this story arrived

Ordered by when each source was first observed, which is what the velocity figure is computed from. Publishers backdate; observed order does not.

  1. 01 Microsoftfirst-party first seen CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability
  2. 02 Microsoftfirst-party +0m CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability
  3. 03 Microsoftfirst-party +0m CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability
  4. 04 Microsoftfirst-party +0m CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability
  5. 05 Microsoftfirst-party +0m CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability
  6. 06 Microsoftfirst-party +0m CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability
  7. 07 Microsoftfirst-party +0m CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability
  8. 08 Microsoftfirst-party +0m CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability
  9. 09 Microsoftfirst-party +0m CVE-2026-50661 Windows BitLocker Security Feature Bypass Vulnerability
  10. 10 Microsoftfirst-party +0m CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability
  11. 11 Microsoftfirst-party +0m CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
  12. 12 Microsoftfirst-party +0m CVE-2026-62899 .NET Security Feature Bypass Vulnerability
  13. 13 Microsoftfirst-party +0m CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability
  14. 14 Microsoftfirst-party +0m CVE-2026-62757 Windows Schannel Security Feature Bypass Vulnerability
  15. 15 Microsoftfirst-party +0m CVE-2026-65777 Active Directory Security Feature Bypass Vulnerability
  16. 16 Microsoftfirst-party +0m CVE-2026-47304 .NET Security Feature Bypass Vulnerability
  17. 17 Microsoftfirst-party +0m CVE-2026-45496 Visual Studio Code Security Feature Bypass Vulnerability
  18. 18 Microsoftfirst-party +0m CVE-2026-50520 Visual Studio Code Remote Code Execution Vulnerability
  19. 19 Microsoftfirst-party +0m CVE-2026-57097 Microsoft XML Security Feature Bypass Vulnerability
  20. 20 Microsoftfirst-party +0m CVE-2026-58614 Windows Kernel Security Feature Bypass Vulnerability
  21. 21 Microsoftfirst-party +0m CVE-2026-49783 Secure Boot Security Feature Bypass Vulnerability
  22. 22 Microsoftfirst-party +0m CVE-2026-50303 Windows Key Guard Security Feature Bypass Vulnerability
  23. 23 Microsoftfirst-party +0m CVE-2026-50302 Windows Cryptographic Services Security Feature Bypass Vulnerability
  24. 24 Microsoftfirst-party +0m CVE-2026-50528 .NET Security Feature Bypass Vulnerability
  25. 25 Microsoftfirst-party +0m CVE-2026-55040 Microsoft SharePoint Server Security Feature Bypass Vulnerability
  26. 26 Microsoftfirst-party +0m CVE-2026-57101 Visual Studio Code Security Feature Bypass Vulnerability
  27. 27 Microsoftfirst-party +0m CVE-2026-57102 Visual Studio Code Security Feature Bypass Vulnerability
  28. 28 Microsoftfirst-party +0m CVE-2026-58545 Windows Kernel Security Feature Bypass Vulnerability
  29. 29 Microsoftfirst-party +0m CVE-2026-47305 Visual Studio Remote Code Execution Vulnerability
  30. 30 Microsoftfirst-party +0m CVE-2026-58638 Windows Boot Loader Security Feature Bypass Vulnerability
  31. 31 Microsoftfirst-party +0m CVE-2026-58523 Microsoft Edge for Android Security Feature Bypass Vulnerability
  32. 32 Microsoftfirst-party +0m CVE-2026-45459 Microsoft Excel Security Feature Bypass Vulnerability
  33. 33 Microsoftfirst-party +0m CVE-2026-48569 Visual Studio Code Security Feature Bypass Vulnerability
  34. 34 Microsoftfirst-party +0m CVE-2026-40376 Visual Studio Code Elevation of Privilege Vulnerability
  35. 35 Microsoftfirst-party +0m CVE-2026-45482 Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerabili
  36. 36 Microsoftfirst-party +0m CVE-2026-45655 Windows BitLocker Security Feature Bypass Vulnerability
  37. 37 Microsoftfirst-party +0m CVE-2026-45656 UEFI Secure Boot Security Feature Bypass Vulnerability
  38. 38 Microsoftfirst-party +0m CVE-2026-47287 Visual Studio Code Tampering Vulnerability
  39. 39 Microsoftfirst-party +0m CVE-2026-45588 Secure Boot Security Feature Bypass Vulnerability
  40. 40 Microsoftfirst-party +0m CVE-2026-8863 UEFI Secure Boot Security Feature Bypass Vulnerability
  41. 41 Microsoftfirst-party +0m CVE-2026-48568 Secure Boot Security Feature Bypass Vulnerability
  42. 42 Microsoftfirst-party +0m CVE-2026-48570 Secure Boot Security Feature Bypass Vulnerability
  43. 43 Microsoftfirst-party +0m CVE-2026-48573 Secure Boot Security Feature Bypass Vulnerability
  44. 44 Microsoftfirst-party +0m CVE-2026-48575 Secure Boot Security Feature Bypass Vulnerability
  45. 45 Microsoftfirst-party +0m CVE-2026-48576 Secure Boot Security Feature Bypass Vulnerability
  46. 46 Microsoftfirst-party +0m CVE-2026-48578 Secure Boot Security Feature Bypass Vulnerability
  47. 47 Microsoftfirst-party +0m CVE-2026-49161 Microsoft PC Manager Security Feature Bypass Vulnerability
  48. 48 Microsoftfirst-party +0m CVE-2026-45595 Windows Mark of the Web Security Feature Bypass Vulnerability
  49. 49 Microsoftfirst-party +0m CVE-2026-45658 Windows BitLocker Security Feature Bypass Vulnerability
  50. 50 Microsoftfirst-party +0m CVE-2026-47281 Visual Studio Code Elevation of Privilege Vulnerability
  51. 51 Microsoftfirst-party +0m CVE-2026-47284 Visual Studio Code Information Disclosure Vulnerability
  52. 52 Microsoftfirst-party +0m CVE-2026-47656 Windows Boot Manager Security Feature Bypass Vulnerability
  53. 53 Microsoftfirst-party +0m CVE-2026-50507 Windows BitLocker Security Feature Bypass Vulnerability
  54. 54 Microsoftfirst-party +0m CVE-2026-45585 Windows BitLocker Security Feature Bypass Vulnerability

Overclock clusters coverage from independent sources and grades it automatically. The figures above are computed, not editorial. This page summarises and links to reporting by the outlets named — follow the links for the original work.