CVE Catalog
CVE-2026-70336
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.64%
48th percentile - higher than 48% of all known CVEs
Summary
A code injection vulnerability in Visual Studio Code allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute arbitrary code in the user's context, potentially leading to system compromise or data theft.
Recommendation
Update Visual Studio Code to the latest version containing the security fix.
Original NVD description (English source)
Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.