7.1
Élevée
CVE-2025-21264 Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a…
Description
Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Visual Studio Code 1.0 | 1.0.0 → < 1.100.1 | 1.100.1 |
| Microsoft Visual Studio CoPilot Chat Extension 0.27 | 0.27.0 → < 0.27.2 | 0.27.2 |
| Microsoft Visual Studio Code CoPilot Chat Extension 0.27 | 0.27.0 → < 0.27.2 | 0.27.2 |
Références
- Visual Studio Code Security Feature Bypass Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Visual Studio Code
Les 93 CVE de Visual Studio Code →
CVE-2026-102851
Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally
6.1
Moyenne
CVE-2026-69370
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an…
8.8
Élevée
CVE-2026-102238
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an…
9.6
Critique
CVE-2026-70098
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network
8.8
Élevée