Skip to content

CVE record · 2 sources

CVE-2026-121663

CVSS 8.8

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Vendor: Microsoft
Product: Visual Studio Code
CVSS v3.1: 8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-184
Exposure class: Developer platform

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

62

Tenable research Tenable 4h ago

Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)

63 Critical 1029 Important 1 Moderate 0 Low Microsoft addresses 1093 CVEs in the eleventh Patch Tuesday of 2026. Microsoft patched 1093 CVEs in its November 2026 Patch Tuesday release, with 63 rated critical, 1029 rated as…

Exploited CVSS 6.5 Fix available CVE-2026-124194 CVE-2026-118146 CVE-2026-120002+17 more Microsoft
36

CVE NVD 4h ago

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

CVSS 8.8 CVE-2026-121663 Microsoft