CVE-2026-103572
Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Ser…
Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.
- Vendor
- Unknown
- Product
- Unknown
- CVSS 3.1
- 8.8 (high), scored by secure@microsoft.comCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CWE
- CWE-94
- Published
- 2026-10-13
- NVD modified
- 2026-10-13
- NVD status
- Awaiting Analysis
Not in the CISA KEV catalogue at the last update.
ThreatWire coverage
References
Data last updated 15 Oct 2026. Sources: NVD API 2.0. Links: NVD, CISA KEV. Metadata only. ThreatWire does not host exploit code.