← Back to feed
advisories Zero Day Initiative

ZDI-26-253: Microsoft Visual Studio Code mcp.json Command Injection Remote Code Execution Vulnerability

Zero Day Initiative • • Microsoft

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio Code. User interaction is required ...

T1190 T1059 1 IOC
Read the full story Zero Day Initiative →

Related Coverage

advisories Reconstructing AI Agent Activity: Two New Scripts for Forensic Review, (Thu, Oct 8th) SANS ISC · Oct 8 advisories Red Lion Controls N-Tron 700 Series CISA Advisories · Oct 8 advisories Satel Netco Design CISA Advisories · Oct 8