Visual Studio Code contains an improper input validation flaw that permits an attacker to elevate their privileges on the system. The weakness involves unauthorized modification, bypassing authentication, and lack of required authorization checks, as indicated by the related weaknesses. The vulnerability could therefore grant an attacker higher privileges than intended, potentially enabling further malicious activity.

The affected product is Microsoft Visual Studio Code. No specific version information is provided, so all current releases are potentially impacted.

The issue has a CVSS score of 9.6, indicating critical severity. While there is no EPSS score available, the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that an attacker could exploit this over a network connection, though the exact conditions and prerequisites are not detailed in the available data.