CVE-2026-102238

Vendor

Microsoft

Product

Visual Studio / .NET

CVSS

9.6

EPSS

0.008 (p57)

Exposure class

Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 35
   CVE NVD 18d ago

   Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code…

   Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

   CVSS 9.6 CVE-2026-102238 Microsoft
2. 25
   Advisory MSRC 18d ago

   CVE-2026-102238 Visual Studio Code Remote Code Execution Vulnerability

   Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

   CVE-2026-102238 Microsoft