High · 7.4 CVE-2026-102230 EUVD-2026-121988

Visual Studio Code Information Disclosure Vulnerability

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Visual Studio Code

Description

Missing authorization in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Visual Studio Code	1.0.0 – < 1.145.3	1.145.3

Advisories 3

WID-SEC-2026-4481 Microsoft Developer Tools: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026
NCSC-2026-0473 Kwetsbaarheden verholpen in Microsoft Developer Tools NCSC-NL (Netherlands) · Nov 10, 2026
MSRC-CVE-2026-102230 Visual Studio Code Information Disclosure Vulnerability Microsoft Security Response Center · Nov 10, 2026

References

Visual Studio Code Information Disclosure Vulnerability vendor-advisory patch