CVE-2026-103572

No fix known EPSS <1%CVSS 8.8

Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.