CVE-2025-32726: Microsoft Visual Studio Code

Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Visual Studio Code: before 1.99.1 (fixed in 1.99.1)

Published 2025-04-12. Last modified 2026-06-17.