CVE-2026-102231
Microsoft · Published October 13, 2026
7.7
CVSS v3.1
HIGHPatch availableGet patch
Description
Visual Studio Code Security Feature Bypass Vulnerability. Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
Affected Products
- Visual Studio Code
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C