Visual Studio Code Security Feature Bypass Vulnerability

A security feature bypass vulnerability has been identified in Visual Studio Code. This issue arises from files or directories that are accessible to external parties, allowing an unauthorized attacker to locally bypass a security feature. Specifically, the vulnerability enables the bypassing of the Trusted Domain Service.

Impact

Exploitation of this vulnerability could lead to a significant loss of confidentiality, allowing an attacker to view sensitive information such as tokens. Additionally, it could result in some integrity loss by enabling changes to the disclosed information.

Remediation

Users can update to Visual Studio Code version 1.100.1, which addresses this vulnerability.