CVE-2026-50178

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 23, 2026

Last Seen

June 23, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

High-Severity RCE Vulnerability in Angular VS Code Extension Discovered72.0

A critical vulnerability, CVE-2026-50178, in the Angular Language Service extension for Visual Studio Code allows remote code execution through malicious JSDoc hover links. The flaw arises from the extension trusting tooltip Markdown while the Angular Language Server inadequately sanitizes JSDoc con...