CVE-2026-119975

Microsoft Developer Tools: Mehrere Schwachstellen

Microsoft Visual Studio 2022, Red Hat Enterprise Linux, Microsoft ASP.NET, Microsoft Azure DevOps Server, Microsoft…

Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

10. Nov 2026

Ausgewertete Quellen

• Microsoft
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119975
• CERT-Bund
  WID-SEC-2026-4481
• NVD
  CVE-2026-119975