7.8
High
CVE-2026-47292 Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to…
Description
Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Visual Studio Code - MSSQL Extension 1.0 | 1.0.0 → < 1.43.0 | 1.43.0 |
References
- Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified