CVE-2026-70336 | Microsoft Visual Studio Code up to 1.132.0 code injection

August 12, 2026 Yanac

A vulnerability described as critical has been identified in Microsoft Visual Studio Code up to 1.132.0. Affected by this issue is some unknown functionality. Such manipulation leads to code injection.

This vulnerability is uniquely identified as CVE-2026-70336. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More