MICROSOFT-CVE-2026-50520

HIGH8.4

Visual Studio Code Remote Code Execution Vulnerability

Published Jul 14, 2026

Modified 3 days ago

Details

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.

References

ADVISORY

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50520

CVSS Analysis

CVSS v2.0

8.4

Upstream

CVE-2026-50520

Ecosystems

Timeline

PublishedJul 14, 2026

ModifiedJul 14, 2026