CVE-2026-102231

Published: Oct 13, 2026Modified: Oct 16, 2026

7.7

Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 6.0

Source: secure@microsoft.com (Secondary)

Description

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Related CWEs

Improper Resolution of Path Equivalence

The product is vulnerable to file system contents disclosure through path equivalence. Path equivalence involves the use of special characters in file and directory names. The associated manipulations are intended to generate multiple names for the same object.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102231

Source: secure@microsoft.com

Timeline

No history available yet.