Microsoft Security Response Center Follow CVE-2026-70334 Visual Studio Code Security Feature Bypass Vulnerability Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70334 msrc.microsoft.com
