ZeroDay Findings
Sign inSign up

Findings

CVE-2026-41612

Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally.

Published May 12, 2026 · updated Jun 17, 2026 · microsoft live preview

Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 12, 2026 · NIST NVD

    Detected

    Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally.

Affected

  • cpe microsoft/live previewversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-41612

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-41612

    Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally.

    nvd.nist.gov

References