CVE-2026-41613

Microsoft · Published May 12, 2026

8.8

CVSS v3.1

HIGH

Patch availableGet patch

Description

Visual Studio Code Elevation of Privilege Vulnerability. Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

Affected Products

Visual Studio Code

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C