Skip to content

CVE record · 2 sources

CVE-2026-102235

CVSS 8.8

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Vendor: Microsoft
Product: Visual Studio / .NET
CVSS: 8.8
EPSS: 0.007 (p54)
Exposure class: Developer platform

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

27

CVE NVD 18d ago

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

CVSS 8.8 CVE-2026-102235 Microsoft
25

Advisory MSRC 18d ago

CVE-2026-102235 Visual Studio Code Remote Code Execution Vulnerability

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

CVE-2026-102235 Microsoft