Skip to content

CVE record · 1 source

CVE-2026-120782

CVSS 7.8

Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Vendor: Microsoft
Product: Visual Studio Code
CVSS v3.1: 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-94, CWE-863
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

36

CVE NVD 4h ago

Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVSS 7.8 CVE-2026-120782 Microsoft