{"id":"CVE-2026-103572","published":"2026-10-13T19:17:53.293","lastModified":"2026-10-13T22:17:25.633","description":"Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-94"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows attackers to inject malicious code into Visual Studio Tools for Applications and SQL Server Management Studio, enabling remote code execution without authentication. The flaw occurs when the applications improperly handle code generation, creating opportunities for attackers to execute arbitrary commands on affected systems.","exploitability":"Exploitation requires a network-based attack with minimal preconditions, as the vulnerability affects unauthenticated remote access to code generation features in both Visual Studio Tools for Applications and SQL Server Management Studio.","blast_radius":"The impact could be significant across organizations using these Microsoft tools, potentially allowing attackers to execute arbitrary code on development and database servers, leading to full system compromise and data exfiltration.","remediation":"Disable the affected Visual Studio Tools for Applications and SQL Server Management Studio code generation features until a patch is available, or restrict network access to these services from untrusted networks.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","code-injection","sql-server","visual-studio"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:53:28.464Z"}}