High · 8.3 CVE-2026-119985 EUVD-2026-122262

Visual Studio Code Remote Code Execution Vulnerability

Published Nov 10, 2026 · Updated Nov 12, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Visual Studio Code

Description

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Visual Studio Code	1.0.0 – < 1.145.3	1.145.3

Advisories 3

WID-SEC-2026-4481 Microsoft Developer Tools: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026
NCSC-2026-0473 Kwetsbaarheden verholpen in Microsoft Developer Tools NCSC-NL (Netherlands) · Nov 10, 2026
MSRC-CVE-2026-119985 Visual Studio Code Remote Code Execution Vulnerability Microsoft Security Response Center · Nov 10, 2026

References

Visual Studio Code Remote Code Execution Vulnerability vendor-advisory patch