Code Execution Vulnerability in Visual Studio Code by Microsoft
CVE-2026-69320

8.8HIGH

Key Information:

Vendor

Microsoft
Status
Visual Studio Code
Vendor
CVE Published:
11 August 2026

What is CVE-2026-69320?

An improper neutralization of special elements used in an OS command enables unauthorized code execution in Visual Studio Code, potentially exposing systems to remote attacks. This vulnerability could allow attackers to execute arbitrary code over a network, compromising the security of affected installations. Users are advised to review available patches and follow security best practices to mitigate risks.

Affected Version(s)

Visual Studio Code 1.0.0 < 1.132.1

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.