CVE-2026-119981: Visual Studio Code Elevation of Privilege Vulnerability

Q: Who is exposed to this vulnerability?

Systems running Microsoft Visual Studio Code are exposed where an attacker already has authorized local access. The attack vector is local, so it is not described as remotely exploitable from the provided information.

Q: What access does an attacker need to exploit it?

An attacker needs low-level privileges and authorized local access. No user interaction is required according to the supplied vector.

Q: What is the potential impact of successful exploitation?

Successful exploitation allows local privilege elevation and is rated as having high impact on confidentiality, integrity, and availability.

Published Nov 10, 2026

Updated

Missing authentication for critical function in Visual Studio Code allows an authorized attacker to elevate privileges locally.

Other sources

Visual Studio Code Elevation of Privilege Vulnerability

— Microsoft

Affected Software

1 affected componentFixes available

Microsoft Visual Studio Code<1.145.3

1.145.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.145.3

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·04:00 PM

Affected Software

CVE Published

via MITRE·06:22 PM

Data Sourced

via MITRE·06:22 PM

DescriptionSeverity

Data Sourced

via NVD·07:20 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this vulnerability?

Systems running Microsoft Visual Studio Code are exposed where an attacker already has authorized local access. The attack vector is local, so it is not described as remotely exploitable from the provided information.

What access does an attacker need to exploit it?

An attacker needs low-level privileges and authorized local access. No user interaction is required according to the supplied vector.

What is the potential impact of successful exploitation?

Successful exploitation allows local privilege elevation and is rated as having high impact on confidentiality, integrity, and availability.

CVE-2026-119981: Visual Studio Code Elevation of Privilege Vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this vulnerability?

What access does an attacker need to exploit it?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this vulnerability?

What access does an attacker need to exploit it?

What is the potential impact of successful exploitation?