Description
Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Visual Studio Code | 1.0.0 – < 1.99.1 | 1.99.1 |
Advisories 2
- MSRC-CVE-2025-32726 Visual Studio Code Elevation of Privilege Vulnerability Microsoft Security Response Center · Jul 3, 2025
- WID-SEC-2025-0793 Microsoft Visual Studio Code: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten BSI CERT-Bund (WID) · Apr 13, 2025
References
- Visual Studio Code Elevation of Privilege Vulnerability vendor-advisory patch