CVE-2026-81376
9.6
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 6.0
Source: secure@microsoft.com (Secondary)
Description
Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Affected (1)
Products: Microsoft: Visual Studio Code
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.136.2 |
Related CWEs
CWE-1023
Incomplete Comparison with Missing Factors
The product performs a comparison between entities that must consider multiple factors or characteristics of each entity, but the comparison does not include one or more of these factors.
CWE-693
Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
References (1)
Source: secure@microsoft.com
PatchVendor Advisory
Timeline
No history available yet.