CVE-2026-70335Disclosure(microsoft / visual_studio_code)

LOWCVSS 7.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch microsoft visual_studio_code systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

microsoft CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Patch / fix

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70335

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

visual_studio_code

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 2d ago at 1 mentions (2026-08-11); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

microsoft

Products

visual_studio_code

Deep dive

Activity timeline3 mentions / 3d

Signal classification3 categories

Disclosure

133.3%

Patch

133.3%

PoC

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-08-11	1	Disclosure1
2026-08-21	1	Patch1
2026-08-22	1	PoC1

Full discourse3 posts

Sebastien Gioria@SPoint36d
PoC
Une page web piégée suffit à faire exécuter des commandes à Copilot dans VS Code https://blog.gioria.org/fr/ai/github-copilot-vscode-cve-2026-70335/?utm_source=twitter&utm_medium=post&utm_campaign=github-copilot-vscode-cve-2026-70335 #GitHubCopilot #PatchTuesday
Post summary
A trap web page can trigger command execution via GitHub Copilot in VS Code (CVE‑2026‑70335); no evidence of active exploitation, a patch, or detailed vulnerability tech is provided.
00020174
2.3K followersView on X
Windows Forum@windowsforum36d
Patch
⚠️ Copilot and VS Code can be tricked into running commands without asking first. AI productivity is great—until “approve?” gets quietly removed. Update to VS Code 1.132.1. https://windowsforum.com/security-alerts.84/cve-2026-70335-github-copilot-and-visual-studio-code-elevation-of-privilege-vulnerability.443302/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftSecurity #Msrc #Cve202670335 https://t.co/GoE1EU0cEx
Post summary
A new elevation‑of‑privilege vulnerability (CVE‑2026‑70335) in GitHub Copilot and VS Code can enable command execution without user approval; Microsoft recommends updating to VS Code 1.132.1 to address the issue.
0000098
1.3K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds46d
Disclosure
CVE-2026-70335 Privilege Escalation via OS Command Injection in GitHub Copilot and VS Code https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-70335
Post summary
The post announces CVE-2026-70335 as a privilege escalation vulnerability in GitHub Copilot and VS Code, providing basic technical details and a link for further information.
0000098
4.1K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	visual_studio_code	-	-	-

Explore more

Back to dashboard microsoft CVEs visual_studio_code vulnerabilities