CVE-2026-70336 - Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. - 漏洞详情

漏洞编号：CVE-2026-70336

风险等级：高危

漏洞来源：CVE

CVE 编号：CVE-2026-70336

CNNVD 编号：-

厂商/产品：microsoft / visual_studio_code

影响范围：cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*

CWE：CWE-94

发布/更新时间：2026-08-11 / 2026-08-28

漏洞描述

Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.