CVE-2026-47281

CriticalCVSS 9.6

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.59%

45th percentile - higher than 45% of all known CVEs

Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

An attacker could gain elevated privileges, potentially leading to full control over the application or data.

Update Visual Studio Code to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.