← Database

CVE-2026-120782

HIGH CVSS: 7.8 Published: 2026-11-10 Modified: 2026-11-10

Description

Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Affected Platforms

Unknown

Weakness Type

CWE-94, CWE-863

References