Vulnerabilities > CVE-2025-21264 - Files or Directories Accessible to External Parties vulnerability in Microsoft Visual Studio Code

047910
CVSS 7.1 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
LOW
Availability impact
NONE
local
low complexity
microsoft
CWE-552

Summary

Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Vulnerable Configurations

Part Description Count
Application
Microsoft
477