EUVD-2026-44276
GHSA-8vjh-hxqp-x752
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Local delivery of crafted content (AV:L) requiring the user to open it (UI:R), no auth (PR:N); a bypassed sandbox yields high confidentiality/integrity impact but no availability effect.
Primary rating from Vendor (microsoft).
CVSS VectorNVD
Lifecycle Timeline
4DescriptionNVD
Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
AnalysisAI
Cross-site scripting in Microsoft Visual Studio Code lets an attacker who tricks a local user into opening crafted content bypass a built-in security feature and gain high-impact code execution within the editor context. The flaw (CWE-79) carries a CVSS 3.1 base score of 7.1 with a local attack vector requiring user interaction, and Microsoft has published an advisory with a fix. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV.
Technical ContextAI
Visual Studio Code is an Electron/Chromium-based desktop editor that renders large portions of its UI - including webviews, notebook renderers, Markdown previews, and extension surfaces - as HTML inside a privileged renderer process. CWE-79 (improper neutralization of input during web page generation) here means attacker-controlled data (e.g. content in a file, workspace, notebook, or extension-provided HTML) is injected into one of these HTML surfaces without adequate sanitization, allowing script to execute in a context it should not reach. The CPE cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:* indicates the desktop application itself is affected across unspecified versions. Because VS Code's webview/CSP model is precisely the 'security feature' designed to sandbox untrusted content, an XSS that escapes it undermines the isolation boundary between rendered content and editor privileges.
RemediationAI
Patch available per vendor advisory - update Visual Studio Code to the fixed build referenced in Microsoft's MSRC guidance at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57101 (exact fixed version not stated in the available data; confirm on that page). VS Code's auto-update should deliver the fix, but managed/offline installs and portable copies must be updated manually, so verify the running version after applying. As interim compensating controls, avoid opening untrusted repositories, files, or notebooks and use Restricted Mode (Workspace Trust) so untrusted workspaces run with reduced capabilities - trade-off: Restricted Mode disables some extensions and tasks and can interrupt normal workflows. Where feasible, disable or limit exposure to the affected rendering surface (e.g. Markdown preview, notebook renderers, or untrusted webview extensions) for high-risk workflows, accepting reduced editor functionality until patched.
More in Visual Studio Code
View allVisual Studio Code Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authent
Visual Studio Code Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely e
Privilege escalation in Microsoft Visual Studio Code allows remote unauthenticated attackers to elevate privileges over
Security-feature bypass in Microsoft Visual Studio Code lets a remote attacker deliver functionality from an untrusted c
Remote code execution in Visual Studio Code (versions 1.0.0 through 1.132.0) is enabled by a missing authorization check
Remote code execution in Microsoft Visual Studio Code allows a network-based attacker to inject and execute arbitrary co
OS command injection in Visual Studio Code exposes victims to remote code execution when they interact with attacker-con
Security-feature bypass in GitHub Copilot and Visual Studio (affecting Visual Studio Code builds before 1.119.1) lets a
Privilege elevation in Microsoft Visual Studio Code (all releases from 1.0.0 up to but not including 1.119.1) stems from
Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attac
Local code execution in Microsoft Visual Studio Code stems from a command injection flaw (CWE-77) that lets an attacker
Security feature bypass via path traversal in GitHub Copilot and Visual Studio Code allows a local unauthorized attacker
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today