Security Advisory

CVE-2026-70335

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-11 17:05:32

Last updated 2026-08-11 23:59:37

Assigner microsoft

CVSS score not scored

State PUBLISHED

Description

Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

← Browse all CVEs View on cve.org ↗