Skip to content

CVE record · 1 source

CVE-2026-119981

CVSS 7.0

Missing authentication for critical function in Visual Studio Code allows an authorized attacker to elevate privileges locally.

Vendor: Microsoft
Product: Visual Studio Code
CVSS v3.1: 7.0 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-306
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

39

CVE NVD 5h ago

Missing authentication for critical function in Visual Studio Code allows an authorized attacker to elevate privileges locally.

Missing authentication for critical function in Visual Studio Code allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-119981 Microsoft