CVE-2026-121662

Vendor

Microsoft

Product

Visual Studio Code

CVSS v3.1

8.6 AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness

CWE-77

Exposure class

Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 62
   Tenable research Tenable 4h ago

   Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)

   63 Critical 1029 Important 1 Moderate 0 Low Microsoft addresses 1093 CVEs in the eleventh Patch Tuesday of 2026. Microsoft patched 1093 CVEs in its November 2026 Patch Tuesday release, with 63 rated critical, 1029 rated as…

   Exploited CVSS 6.5 Fix available CVE-2026-124194CVE-2026-118146CVE-2026-120002+17 more Microsoft
2. 39
   CVE NVD 4h ago

   Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute…

   Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.

   CVSS 8.6 CVE-2026-121662 Microsoft