Skip to content

CVE record · 1 source

CVE-2026-120779

CVSS 9.6

Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Vendor: Microsoft
Product: Visual Studio Code
CVSS v3.1: 9.6 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Weakness: CWE-94
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

47

CVE NVD 3h ago

Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

CVSS 9.6 CVE-2026-120779 Microsoft