CVE-2026-57101

Опубликовано: 14 июл. 2026

Источник: msrc

CVSS3: 7.1

EPSS Низкий

Описание

Visual Studio Code Security Feature Bypass Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Обновления

Продукт	Статья	Обновление
Visual Studio Code	Release Notes	Security Update

Показывать по

Возможность эксплуатации

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

EPSS

Процентиль: 36%

0.00442

Низкий

7.1 High

CVSS3

Связанные уязвимости

CVE-2026-57101

CVSS3: 7.1

nvd

19 дней назад

Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

GHSA-8vjh-hxqp-x752

CVSS3: 7.1

github

19 дней назад

Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

EPSS

Процентиль: 36%

0.00442

Низкий

7.1 High

CVSS3