CVE Catalog

CVE-2026-69278

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.46%

38th percentile - higher than 38% of all known CVEs

Summary

Incorrect authorization in Visual Studio Code. An unauthorized attacker can bypass a security feature locally.

Risk Assessment

Local security bypass could allow an attacker to access functions or data they are not authorized to use.

Recommendation

Update Visual Studio Code to the latest version and restrict local access to the application.

Original NVD description (English source)

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS