CVE-2026-47292

7.8 highEPSS 0.4%

High (7.8) in microsoft visual studio code. EPSS 0.4% chance of exploitation in the next 30 days.

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

Severity

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-11-01)
CWEs: CWE-94, CWE-829
Published: 2026-06-09
Modified: 2026-08-24
Record from: the NVD, synced 2026-10-19