Microsoft Microsoft Visual Studio 2026 version 18.7 vulnerabilities

CVE-2026-50651 High · 7.5 CWE-770 Jul 14, 2026

.NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-50650 High · 7.8 CWE-94 Jul 14, 2026

.NET Framework Elevation of Privilege Vulnerability

Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.

CVE-2026-50649 High · 7.8 CWE-502 Jul 14, 2026

.NET Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

CVE-2026-50659 Medium · 6.5 CWE-116 Jul 14, 2026

.NET Spoofing Vulnerability

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

CVE-2026-50648 High · 7.5 CWE-770 Jul 14, 2026

.NET Framework Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

CVE-2026-50646 High · 7.8 CWE-502 Jul 14, 2026

.NET Framework Remote Code Execution Vulnerability

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

CVE-2026-50528 High · 8.2 CWE-302 Jul 14, 2026

.NET Security Feature Bypass Vulnerability

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-50527 High · 7.5 CWE-121 Jul 14, 2026

.NET Framework Denial of Service Vulnerability

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

CVE-2026-50526 Medium · 5.5 CWE-59 Jul 14, 2026

.NET Tampering Vulnerability

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.

CVE-2026-50525 High · 7.5 CWE-770 Jul 14, 2026

.NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-50524 High · 7.5 CWE-1287 Jul 14, 2026

.NET Framework Denial of Service Vulnerability

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.

CVE-2026-47305 High · 7.8 CWE-693 Jul 14, 2026

Visual Studio Remote Code Execution Vulnerability

Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.

CVE-2026-47304 Critical · 9.8 CWE-345 Jul 14, 2026

.NET Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-47303 High · 8.8 CWE-90 Jul 14, 2026

ASP.NET Core Elevation of Privilege Vulnerability

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

CVE-2026-47302 High · 7.5 CWE-770 Jul 14, 2026

.NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-47300 High · 8.8 CWE-303 Jul 14, 2026

ASP.NET Core Elevation of Privilege Vulnerability

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.