CVE-2026-50520

Vendor

Microsoft

Product

Visual Studio / .NET

CVSS

8.4

Exposure class

Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 27
   CVE NVD 14 Jul 2026

   Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute…

   Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.

   CVSS 8.4 CVE-2026-50520 Microsoft
2. 19
   Advisory MSRC 14 Jul 2026

   CVE-2026-50520 Visual Studio Code Remote Code Execution Vulnerability

   Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.

   CVE-2026-50520 Microsoft