high7.3
CVE-2025-26631
Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally.
Impact
Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Visual Studio Code | before 1.98.0 |