CVE-2026-120779

CRITICAL NVD

CVSS Score 9.6

Severity CRITICAL

Published Nov 10, 2026

Vendor unknown

Description

Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.