Tag: CVSS 8.8

Critical CVEs

A vulnerability in Microsoft Visual Studio Code's MCP install dialog (CVSS 8.8, aka Envade) enables full code execution or MCP tool call…

Code Execution CVE-2026-41613 CVSS 8.8 MCP

August 27, 2026

Critical CVEs

Amazon addressed an insufficient access control flaw in Kiro IDE (CVSS 8.8) that could allow a remote unauthenticated attacker to execute arbitrary…

access control Amazon Kiro CVE-2026-10591 CVSS 8.8

July 15, 2026