CVE-2025-26631CWE-427

Visual Studio Code Elevation of Privilege Vulnerability

High · published March 11, 2025

CVSS v3.1

7.3

EPSS

1%

Percentile

46.7

In the wild

Unconfirmed

What it is

Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally.

The record

Technical detail

CVSS v3.1: 7.3 · HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0: Not supplied
EPSS: 0.00575 · 46.7th percentile
Weakness: CWE-427 · Uncontrolled Search Path Element
Published: 2025-03-11T16:59Z

EPSS history

Timeline

11 MAR 16:59Z
Visual Studio Code Elevation of Privilege Vulnerability
cvelistv5