CVE-2026-70098

HighCVSS 8.8/10Last modified Oct 15, 2026

Description

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-862

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 15, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-70106.5HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values. The unvalidated inputsCVE-2026-701027.8Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.CVE-2026-701037.8Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.CVE-2026-701047.8Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.CVE-2026-701057.5Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-701067.8Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-701087.8Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.CVE-2026-701097.8Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.CVE-2026-70112.4A weakness has been identified in MaxSite CMS up to 109.3. Affected by this vulnerability is an unknown functionality of the file /admin/pluCVE-2026-701107.8Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.CVE-2026-701118.1Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.CVE-2026-701127.8Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVE-2026-70098: High severity, CVSS 8.8 | Vulnix