CVE-2026-102851

MediumCVSS 6.1/10Last modified Oct 13, 2026

Description

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N

Weakness enumeration

CWE-266

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 13, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-1028558.8Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.CVE-2026-1028568.8Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.CVE-2026-1028578.8Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.CVE-2026-1028588.8Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.CVE-2026-1028594.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attCVE-2026-102866.3A vulnerability was found in CodeAstro Payroll System 1.0. This affects an unknown part of the file /home_employee.php. The manipulation of CVE-2026-1028608.8Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-1028618.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-1028628.8Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-1028638.8Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privilegesCVE-2026-1028644.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attCVE-2026-1028656.5Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-102851: Medium severity, CVSS 6.1 | Vulnix