[CVE-2026-70334] Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass…

Descripción técnica

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Received

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-184

Fuente oficial

Publicado en NIST NVD.