VULNERABILITY INTELLIGENCE
CVE-2026-45496
CVSS score5.5 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2026-07-14
Last modified2026-10-24
Description
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
Primary references
- microsoft — vendor-advisory, patch