CVE-2026-57102

Microsoft · Published July 14, 2026

8.8

CVSS v3.1

HIGH

Patch availableGet patch

Description

Visual Studio Code Security Feature Bypass Vulnerability. Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Affected Products

Visual Studio Code

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C