Microsoft Visual Studio 2026 vulnerabilities

CVE-2026-77907 High · 8.8 CWE-122 Sep 8, 2026

Visual Studio Remote Code Execution Vulnerability

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

CVE-2026-77906 High · 8.8 CWE-122 Sep 8, 2026

Visual Studio Remote Code Execution Vulnerability

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

CVE-2026-71328 High · 8.8 CWE-122 Sep 8, 2026

.NET and Visual Studio Remote Code Execution Vulnerability

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

CVE-2026-69806 High · 7.0 CWE-94 Sep 8, 2026

.NET Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-69805 High · 8.1 CWE-73 Sep 8, 2026

.NET Elevation of Privilege Vulnerability

External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-69439 High · 8.8 CWE-122 Sep 8, 2026

.NET and Visual Studio Elevation of Privilege Vulnerability

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-69304 Medium · 5.9 CWE-409 Sep 8, 2026

ASP.NET Core Denial of Service Vulnerability

Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-58649 Medium · 6.5 CWE-346 Sep 8, 2026

.NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

CVE-2026-70354 High · 7.8 CWE-787 Aug 11, 2026

Out-of-bounds Write in Microsoft Visual Studio 2022

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

CVE-2026-62909 High · 7.8 CWE-252 Aug 11, 2026

Unchecked Return Value in Microsoft Visual Studio 2022

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-62902 Medium · 6.5 CWE-693 Aug 11, 2026

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized…

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.

CVE-2026-62901 High · 7.5 CWE-606 Aug 11, 2026

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny…

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-62900 Medium · 5.9 CWE-212 Aug 11, 2026

Improper removal of sensitive information before storage or transfer in .NET allows an…

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

CVE-2026-62899 Medium · 5.9 CWE-444 Aug 11, 2026

HTTP Request Smuggling in Microsoft Visual Studio 2022

Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-62898 High · 7.5 CWE-416 Aug 11, 2026

Use After Free in Microsoft Visual Studio 2022

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

CVE-2026-62897 High · 7.0 CWE-190 Aug 11, 2026

Integer Overflow or Wraparound in Microsoft .net Framework

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.

CVE-2026-62886 High · 7.8 CWE-122 Aug 11, 2026

Heap-based Buffer Overflow in Microsoft Visual Studio 2022

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

CVE-2026-62871 High · 7.8 CWE-122 Aug 11, 2026

Heap-based Buffer Overflow in Microsoft .net

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

CVE-2026-50651 High · 7.5 CWE-770 Jul 14, 2026

.NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-50649 High · 7.8 CWE-502 Jul 14, 2026

.NET Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

CVE-2026-50659 Medium · 6.5 CWE-116 Jul 14, 2026

.NET Spoofing Vulnerability

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

CVE-2026-50648 High · 7.5 CWE-770 Jul 14, 2026

.NET Framework Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

CVE-2026-50646 High · 7.8 CWE-502 Jul 14, 2026

.NET Framework Remote Code Execution Vulnerability

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

CVE-2026-50528 High · 8.2 CWE-302 Jul 14, 2026

.NET Security Feature Bypass Vulnerability

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-50527 High · 7.5 CWE-121 Jul 14, 2026

.NET Framework Denial of Service Vulnerability

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.