CVE-2026-120779

Microsoft Developer Tools: Mehrere Schwachstellen

Microsoft Visual Studio 2022, Red Hat Enterprise Linux, Microsoft ASP.NET, Microsoft Azure DevOps Server, Microsoft…

Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

10. Nov 2026

Ausgewertete Quellen

• Microsoft
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120779
• CERT-Bund
  WID-SEC-2026-4481
• NVD
  CVE-2026-120779