← Database

CVE-2026-45644

HIGH CVSS: 8.0 Published: 2026-06-09 Modified: 2026-07-23

Description

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Live Share Canvas SDK allows an authorized attacker to elevate privileges over a network.

Affected Platforms

Microsoft Live Share Canvas

Weakness Type

CWE-79

References