Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

CVE-2026-47287 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2026-47287

CVE-2026-47287

MEDIUM6.5

Visual Studio Code Tampering Vulnerability

Published Jun 9, 2026

Modified 1 weeks ago

Fix available

Details

Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.

Affected Packages

code

Debian 10Debian 11Debian 12Debian 13Debian 8

Fixed in:

1.123.2

Microsoft Visual Studio Code

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Fixed in:

1.123.2

Microsoft Visual Studio Code (System)

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Fixed in:

1.123.2

Microsoft Visual Studio Code (User)

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Fixed in:

1.123.2

Visual Studio Code

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Fixed in:

1.123.2

com.microsoft.VSCode

macOS 12macOS 13macOS 14macOS 15macOS 26

Fixed in:

1.123.2

References

ADVISORY

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47287

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-47287

CVSS Analysis

CVSS v3.1

6.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

HighI:H

Availability

NoneA:N

6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness Type (CWE)

Input Validation

CWE-23

Relative Path Traversal

Ecosystems(61)

Debian 10 Debian 11 Debian 12 Debian 13 Debian 8

Timeline

PublishedJun 9, 2026

ModifiedSep 24, 2026