CVE-2026-47292

CVSS Score & Metrics

Base Score

7.8 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H                                    

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

Published Date

June 09, 2026

Last Modified

June 15, 2026

CWE ID

CWE-94

Source

NVD

Vendor

microsoft

Product

visual_studio_code