Vulda1

Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Untrusted search path in Visual Studio Code allows an unauthorized attacker to execute code over a network.

An issue in the Core component allows a low privileged attacker with network access via HTTPS to compromise the system. Successful exploitation can result in a complete takeover of the service and may significantly impact additional products due to a scope change.