CVE-2026-40376 Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network

Description

Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Visual Studio Code 1.0	1.0.0 → < 1.123.2	1.123.2

Autres CVE de Visual Studio Code

Les 93 CVE de Visual Studio Code →

CVE-2026-102851 Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally 6.1 Moyenne CVE-2026-69370 Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an… 8.8 Élevée CVE-2026-102238 Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an… 9.6 Critique CVE-2026-70098 Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network 8.8 Élevée