CVE Catalog
CVE-2026-40376
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.13%
31th percentile - higher than 31% of all known CVEs
Summary
Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker could gain access to elevated privileges, potentially leading to serious security breaches in the system.
Recommendation
It is recommended to update Visual Studio Code to the latest version to patch this vulnerability and implement additional security measures.
Original NVD description (English source)
Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.