CVE-2026-103572 — Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute cod…
Published: 2026-10-13 · CVSS: 8.8 · CVSS 3.1
Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.
Source: CVE Program · Revision b3c4bc369e1d7ee69235e352bacfbb449caf40a8