Every CVE whose affected-product data names Microsoft Codeql, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (1)
CVE-2019-16765 — CVSS 7.4 (high): If an attacker can get a user to open a specially prepared directory tree as a workspace in Visual Studio Code with the CodeQL extension…