CVE-2026-70335 - Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally. - 漏洞详情

漏洞编号：CVE-2026-70335

风险等级：高危

漏洞来源：CVE

CVE 编号：CVE-2026-70335

CNNVD 编号：-

厂商/产品：microsoft / visual_studio_code

影响范围：cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*

CWE：CWE-78

发布/更新时间：2026-08-11 / 2026-08-28

漏洞描述

Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70335 - Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally. - 漏洞详情

漏洞描述

相关链接

相关漏洞