All apps
V

Visual Studio Code

Developer Tools
Microsoft·Website

Lightweight, extensible code editor

Latest versions

Stable
WindowsLinuxmacOS
1.142.0
Actively exploited
0
CISA KEV
Affecting latest
0
v1.142.0
+15 unverified
Known CVEs
99
across all versions, as matched by PemSync
Last checked
21 Oct 2026, 4:42

Of 99 recorded CVEs, 84 are fixed in versions you're past. 15 could not be evaluated against 1.142.0 — treat them as unknown rather than resolved. They are listed first in the table below.

CVESeverityEPSS pctStatusScore source
CRITICALvendor68%Impact unverified—8 Oct 2024
HIGHvendor84%Impact unverified—11 Oct 2022
—64%Impact unverified—13 Sep 2022
—48%Impact unverified—15 Apr 2022
—81%Impact unverified—9 Feb 2022
—87%Impact unverified—15 Dec 2021
—83%Impact unverified—15 Sep 2021
HIGHvendor88%Impact unverified—11 Mar 2021
—82%Impact unverified—25 Feb 2021
—90%Impact unverified—11 Nov 2020
—92%Impact unverified—16 Oct 2020
—89%Impact unverified—16 Oct 2020
CRITICALvendor91%Impact unverifiedVendor advisory21 May 2020
—98%Impact unverified—5 Mar 2019
—93%Impact unverified—26 Jun 2018
HIGHvendor34%Fixed in 1.141.1Vendor advisory13 Oct 2026
HIGHvendor50%Fixed in 1.141.1Vendor advisory13 Oct 2026
HIGHvendor45%Fixed in 1.141.1Vendor advisory13 Oct 2026
HIGHvendor50%Fixed in 1.141.1Vendor advisory13 Oct 2026
HIGHvendor52%Fixed in 1.141.1Vendor advisory13 Oct 2026
HIGHvendor16%Fixed in 1.141.1Vendor advisory13 Oct 2026
HIGHvendor35%Fixed in 1.141.1Vendor advisory13 Oct 2026
HIGHvendor25%Fixed in 1.141.1Vendor advisory13 Oct 2026
HIGHvendor30%Fixed in 1.141.1Vendor advisory13 Oct 2026
HIGHvendor60%Fixed in 1.141.1Vendor advisory13 Oct 2026
Showing 1–25 of 99
Page 1 of 4

PemSync reports known, cataloged exploited vulnerabilities (CISA KEV) and published CVEs. It is not a zero-day detection or threat-intelligence system — a vulnerability may be exploited before it appears here. Absence of data does not mean an app is secure.

More from Microsoft