CVE-2022-24526: Visual Studio Code Spoofing Vulnerability

According to the CVSS Score, User Interaction is not required to potentially allow this vulnerability. What would the user do to allow exploitation?

The user would have be enticed to open a malicious file in vscode. Users should never open anything that they do not know or trust to be safe.