{"metadata": {"vulnerability": "CVE-2026-102238", "count": 27, "kinds": {"milestone": 7, "sighting": 6, "kev": 0, "other": 14}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0426", "record": "NCSC-2026-0426", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-28T18:28:18.686Z", "date_only": false, "value": "2026-09-28T18:28:18.686Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-102238", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T11:56:15Z", "date_only": false, "value": "2026-10-13T11:56:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0426", "record": "CVE-2026-102238", "field": "creation_timestamp", "uuid": "ccea7f8b-9040-4dee-97cd-36e021912b26", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0426"}, {"timestamp": "2026-10-13T14:00:00Z", "date_only": false, "value": "2026-10-13T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2026-102238", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T18:56:15.788Z", "date_only": false, "value": "2026-10-13T18:56:15.788419Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0426", "record": "NCSC-2026-0426", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T18:56:15.788Z", "date_only": false, "value": "2026-10-13T18:56:15.788419Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0426", "record": "NCSC-2026-0426", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T18:56:15.788Z", "date_only": false, "value": "2026-10-13T18:56:15.788419Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0426", "record": "NCSC-2026-0426", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T18:59:28.040Z", "date_only": false, "value": "2026-10-13T18:59:28.040Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-102238", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T20:17:06Z", "date_only": false, "value": "2026-10-13T20:17:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HCCQ-3QMX-2G7F", "record": "GHSA-HCCQ-3QMX-2G7F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T20:17:06.727Z", "date_only": false, "value": "2026-10-13T20:17:06.727", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102238", "record": "FKIE_CVE-2026-102238", "field": "published"}, {"timestamp": "2026-10-13T21:14:58.475Z", "date_only": false, "value": "2026-10-13T21:14:58.475351Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-102238", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T21:14:58.475Z", "date_only": false, "value": "2026-10-13T21:14:58.475351Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102238", "record": "FKIE_CVE-2026-102238", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T21:15:38.464Z", "date_only": false, "value": "2026-10-13T21:15:38.464Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-102238", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T21:37:18Z", "date_only": false, "value": "2026-10-13T21:37:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HCCQ-3QMX-2G7F", "record": "GHSA-HCCQ-3QMX-2G7F", "field": "published"}, {"timestamp": "2026-10-13T21:37:18Z", "date_only": false, "value": "2026-10-13T21:37:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HCCQ-3QMX-2G7F", "record": "GHSA-HCCQ-3QMX-2G7F", "field": "modified"}, {"timestamp": "2026-10-13T22:14:35.383Z", "date_only": false, "value": "2026-10-13T22:14:35.383159Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxs2lvnbda2h", "record": "CVE-2026-102238", "field": "creation_timestamp", "uuid": "d1b59eac-0193-4886-ab3f-1f0c65fa40c5", "content": "\ud83d\udea8 CVE-2026-102238 \u2014 CVSS 9.6 CRITICAL\n\nImproper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102238\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxs2lvnbda2h"}, {"timestamp": "2026-10-13T22:50:04.623Z", "date_only": false, "value": "2026-10-13T22:50:04.623086Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxs4lealri2z", "record": "CVE-2026-102238", "field": "creation_timestamp", "uuid": "8bd77d06-c734-4672-af08-24b423c298cd", "content": "CVE-2026-102238 - visual studio code\nVisual Studio Code can be tricked into accessing files outside its intended folder, allowing a remote attacker to run their own commands on a system. This could let the attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxs4lealri2z"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "last_revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "initial_release_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-14T01:49:33Z", "date_only": false, "value": "2026-10-14T01:49:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25", "record": "CVE-2026-102238", "field": "creation_timestamp", "uuid": "e134d818-5ae2-419e-af56-2f18c39ee458", "url": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25"}, {"timestamp": "2026-10-14T11:30:57.199Z", "date_only": false, "value": "2026-10-14T11:30:57.199186Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mxth3um5lo2o", "record": "CVE-2026-102238", "field": "creation_timestamp", "uuid": "916ff0f5-1b87-4e59-a4c6-be14edb7a973", "content": "Microsoft fixed 10 VS Code flaws in its October update.\n\nThe worst, CVE-2026-102238, is a 9.6 remote code execution bug.\n\nNone are exploited or publicly disclosed.\n\nhttps://thecircuitry.to/article/microsoft-fixes-10-vs-code-flaws-in-1-141-1-led-by-a-9-6-rce-bug-mv7w4ld6", "url": "https://bsky.app/profile/thecircuitry.to/post/3mxth3um5lo2o"}, {"timestamp": "2026-10-14T12:44:58.506Z", "date_only": false, "value": "2026-10-14T12:44:58.506759Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117439325672972927", "record": "CVE-2026-102238", "field": "creation_timestamp", "uuid": "6d4de7c3-cd24-4e7a-892d-691579545721", "content": "CVE-2026-102238 Visual Studio Code Remote Code Execution Vulnerability Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.\nhttps://www.cve.org/CVERecord?id=CVE-2026-102238https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102238#Microsoft #VisualStudioCode#CVE_2026_102238#bot", "url": "https://infosec.exchange/users/cve/statuses/117439325672972927"}, {"timestamp": "2026-10-15T20:39:54.150Z", "date_only": false, "value": "2026-10-15T20:39:54.150", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102238", "record": "FKIE_CVE-2026-102238", "field": "lastModified"}, {"timestamp": "2026-10-15T22:19:16.934Z", "date_only": false, "value": "2026-10-15T22:19:16.934Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-102238", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T22:19:16.934Z", "date_only": false, "value": "2026-10-15T22:19:16.934Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2026-102238", "field": "containers.cna.providerMetadata.dateUpdated"}]}