← Database

CVE-2026-47292

HIGH CVSS: 7.8 Published: 2026-06-09 Modified: 2026-07-23

Description

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

Affected Platforms

Microsoft Visual Studio Code

Weakness Type

CWE-94, CWE-829

References