EUVD-2026-29693Severity by source
AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Local file delivery with no attacker privileges needed; user must actively trigger webview rendering; scope change reflects webview sandbox escape with confidentiality-only impact on the broader VS Code process.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
AnalysisAI
Cross-site scripting in Microsoft Visual Studio Code (all versions prior to 1.119.1) allows a local attacker to inject malicious scripts into VS Code's webview rendering engine, bypassing security feature protections with high confidentiality impact across component boundaries. The CVSS Scope:Changed metric (S:C) combined with C:H indicates the injected payload can escape the webview sandbox and exfiltrate data accessible to the broader VS Code/Electron process, such as environment variables, authentication tokens, or workspace file contents. No public exploit code has been identified and EPSS sits at 0.04% (13th percentile), indicating low current exploitation pressure despite the meaningful confidentiality impact.
Technical ContextAI
Visual Studio Code is an Electron-based IDE that renders HTML/webview content in isolated webview panels - used for Markdown previews, notebook rendering, extension UIs, and built-in browser panels. CWE-79 (Improper Neutralization of Input During Web Page Generation) identifies the root cause as insufficient sanitization of user-controlled or file-supplied input before rendering it in one of these web contexts. The CVSS Scope:Changed metric is significant here: it confirms the XSS payload is not contained within the webview sandbox but can reach the Electron renderer process or adjacent VS Code components with broader data access. CPE cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:* covers all platform variants (Windows, macOS, Linux) across the full affected range. The local attack vector (AV:L) is consistent with file-based delivery rather than network-based injection.
RemediationAI
Upgrade Visual Studio Code to version 1.119.1 or later, which contains the vendor-released patch as documented by Microsoft at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41610. The fix version 1.119.1 is confirmed by EUVD-2026-29693. As a compensating control prior to patching, avoid opening files from untrusted sources (repositories, email attachments, shared drives) in VS Code features that render webview content - specifically Markdown preview, HTML preview, Jupyter notebooks, and extension-provided browser panels; disabling these preview features via VS Code settings or disabling untrusted extensions reduces the webview attack surface but may impair editor functionality. Organizations should also consider enabling VS Code's Workspace Trust feature, which prompts before executing content from unknown workspaces and reduces the risk of automatic webview rendering of malicious files.
More in Visual Studio Code
View allVisual Studio Code Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authent
Visual Studio Code Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely e
Security-feature bypass in Microsoft Visual Studio Code before 1.136.2 lets a remote, unauthenticated attacker defeat a
Privilege escalation in Microsoft Visual Studio Code allows remote unauthenticated attackers to elevate privileges over
Security-feature bypass in Microsoft Visual Studio Code lets a remote attacker deliver functionality from an untrusted c
Remote code execution in Visual Studio Code (versions 1.0.0 through 1.132.0) is enabled by a missing authorization check
Remote code execution in Microsoft Visual Studio Code allows a network-based attacker to inject and execute arbitrary co
Authorization bypass in Visual Studio Code versions 1.0.0 through 1.136.1 allows an unauthenticated network attacker to
OS command injection in Visual Studio Code exposes victims to remote code execution when they interact with attacker-con
Security-feature bypass in GitHub Copilot and Visual Studio (affecting Visual Studio Code builds before 1.119.1) lets a
Privilege elevation in Microsoft Visual Studio Code (all releases from 1.0.0 up to but not including 1.119.1) stems from
Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attac
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today