CVE-2026-102232

Published: Oct 13, 2026Modified: Oct 13, 2026

7.0

Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 5.9

Source: secure@microsoft.com (Secondary)

Description

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Related CWEs

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102232

Source: secure@microsoft.com

Timeline

No history available yet.