CVE-2021-26437

MediumCVSS 5.5

Published: 15/09/2021(UTC)Updated: 10/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.13%

80th percentile - higher than 80% of all known CVEs

Summary

Spoofing vulnerability in Visual Studio Code. An attacker could impersonate a trusted source, potentially leading to display of false information or tricking users into performing unwanted actions.

Risk Assessment

Risk of fraud and phishing, which could result in data theft or malware installation.

Recommendation

Update Visual Studio Code to the latest version that includes the fix for this vulnerability.

Original NVD description (English source)

Visual Studio Code Spoofing Vulnerability