CVE-2026-21523Disclosure(microsoft / visual_studio_code)

LOWCVSS 8.0 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Prioritize remediation for microsoft visual_studio_code systems immediately
Assume compromise if assets are exposed
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network.

microsoft CVEs Back to dashboard

3.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21523

Weakness type (CWE)

CWE-367

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

visual_studio_code

Threat summary

Active exploitation appears in 1 classified signals
3 mentions across 3 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
Peaked 2d ago at 1 mentions (2026-02-10); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

microsoft

Products

visual_studio_code

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Disclosure

266.7%

Active Exploitation

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-10	1	Disclosure1
2026-02-26	1	Disclosure1
2026-05-29	1	Active Exploitation1

Full discourse3 posts

ThreadLinqs@threadlinqs132d
Active Exploitation
NEW THREAT INTEL: CVE-2026-21523 - TOCTOU race in GitHub Copilot/VS Code enables RCE. CVSS 8.0. 9 detections, 13 IOCs. https://intel.threadlinqs.com/threat/TL-2026-0627 #ThreatIntel #CyberSecurity https://t.co/9kHFztUCiX
Post summary
The tweet reports that CVE‑2026‑21523, a TOCTOU race condition causing RCE, is actively being exploited, as evidenced by multiple detections and IOCs, but no PoC or patch details are provided.
0000096
51 followersView on X
Aakash Rahsi@rahsi_aaka224d
Disclosure
CVE-2026-21523 | GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability https://www.aakashrahsi.online/post/cve-2026-21523 https://t.co/O5jRNhvORb
Post summary
The tweet announces CVE-2026-21523, a remote code execution vulnerability in GitHub Copilot and Visual Studio Code, but provides no further details on PoC, exploit, patch, or active exploitation.
0000036
2 followersView on X
CVE@CVEnew240d
Disclosure
CVE-2026-21523 Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network. https://www.cve.org/CVERecord?id=CVE-2026-21523
Post summary
The post announces a new CVE (CVE‑2026‑21523) describing a toctou race condition in GitHub Copilot and Visual Studio that could allow an authorized attacker to execute network code.
00000183
56.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	visual_studio_code	-	-	-

Explore more

Back to dashboard microsoft CVEs visual_studio_code vulnerabilities