CVSS 8.8

Everything Patch Herald has reported about CVSS 8.8: 2 stories, newest first. Part of our Vulnerabilities coverage.

CVSS 8.8 CSRF Flaw Affects aThemeArt Theme Helper Up To Version 1.0.8

A high-severity cross-site request forgery vulnerability in the aThemeArt Theme Helper plugin requires immediate attention for users running version 1.0.8 or earlier.

Oct 16, 2026

Vulnerabilities

1.141.1 Patch Fixes High-Severity Encoding Error Allowing Network RCE in Visual Studio Code

Microsoft confirms a high-severity encoding error in Visual Studio Code versions below 1.141.1 allows unauthorized remote code execution over a network.

Oct 15, 2026