Microsoft Microsoft Visual Studio 2026 version 18.9 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Microsoft Visual Studio 2026 version 18.9: 9 record(s), with affected versions and fixes.
CVE-2026-77907
High · 8.8
CWE-122 Sep 8, 2026
Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-77906
High · 8.8
CWE-122 Sep 8, 2026
Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-71328
High · 8.8
CWE-122 Sep 8, 2026
.NET and Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-69806
High · 7.0
CWE-94 Sep 8, 2026
.NET Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
CVE-2026-69805
High · 8.1
CWE-73 Sep 8, 2026
.NET Elevation of Privilege Vulnerability
External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69522
High · 8.8
CWE-122 Sep 8, 2026
.NET and Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-69439
High · 8.8
CWE-122 Sep 8, 2026
.NET and Visual Studio Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69304
Medium · 5.9
CWE-409 Sep 8, 2026
ASP.NET Core Denial of Service Vulnerability
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-58649
Medium · 6.5
CWE-346 Sep 8, 2026
.NET Information Disclosure Vulnerability
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.