CVE-2026-69370 Visual Studio Code Remote Code Execution Vulnerability Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. EPSS 0.01 CVE-2026-69370 US tg: zranitelnost 13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-69370 Visual Studio Code Remote Code Execution Vulnerability