VS Code before 1.136.2 bypasses Workspace Trust (CVE-2026-81376)
A prepared workspace can reach an attacker service and run code as the user; Microsoft fixed it and paid the reporter $4,000.
3
Stories per day · 30 days
3 stories, newest first · one card per story
Stories tagged #security-bypass
USN-8736-2: Perl vulnerabilities
Ubuntu issued USN-8736-2 fixing two Perl regex flaws that could cause out-of-bounds heap access, denial of service, or security bypass on 24.04 LTS.
USN-8736-1: Perl vulnerabilities
Ubuntu issued USN-8736-1 fixing two Perl regex flaws that could cause denial of service, code execution, or security-restriction bypass.