Elevation of Privilege Vulnerability in Visual Studio Code by Microsoft
CVE-2025-32726

6.8MEDIUM

Key Information:

Vendor

Microsoft
Status
Visual Studio Code
Vendor
CVE Published:
12 April 2025

What is CVE-2025-32726?

Improper access control in Visual Studio Code creates a security risk, enabling unauthorized users to potentially elevate their privileges locally. This weakness can compromise user data and system integrity, highlighting the importance of timely updates and robust security practices to mitigate potential threats.

Affected Version(s)

Visual Studio Code Unknown 1.0.0 < 1.99.1

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-32726 : Elevation of Privilege Vulnerability in Visual Studio Code by Microsoft