Security Update for Microsoft Visual Studio Code (March 2025)

The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.98.0. It is, therefore, affected by multiple vulnerabilities: - Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally. CVE-2025-26631 Note that Nessu...

CVE-2025-26631

Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally...

CVE-2025-26631

Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally...

CVE-2025-26631

CVE-2025-26631 affects Visual Studio Code and is described as an Uncontrolled search path element that can allow an authorized, local attacker to escalate privileges. Connected sources (e.g., Nessus plugin for Microsoft Visual Studio Code security update) note that the issue affects installations...

CVE-2025-26631

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:44:07+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0079 2025-03-11 20:08:20+00:00| seen|...