Microsoft disclosed CVE-2026-47281 on June 9, 2026, as an Important Visual Studio Code elevation-of-privilege vulnerability that can let an unauthenticated network attacker gain SYSTEM privileges if a user opens a malicious .code-workspace file in VS Code. The awkward part is not that...