Microsoft Visual Studio 2026 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Visual Studio 2026: 40 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:visual_studio_2026
CVE-2026-50646
High · 7.8
CWE-502 Jul 14, 2026
.NET Framework Remote Code Execution Vulnerability
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.
CVE-2026-50528
High · 8.2
CWE-302 Jul 14, 2026
.NET Security Feature Bypass Vulnerability
Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-50527
High · 7.5
CWE-121 Jul 14, 2026
.NET Framework Denial of Service Vulnerability
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-50526
Medium · 5.5
CWE-59 Jul 14, 2026
.NET Tampering Vulnerability
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.
CVE-2026-50525
High · 7.5
CWE-770 Jul 14, 2026
.NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-50524
High · 7.5
CWE-1287 Jul 14, 2026
.NET Framework Denial of Service Vulnerability
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.
CVE-2026-47305
High · 7.8
CWE-693 Jul 14, 2026
Visual Studio Remote Code Execution Vulnerability
Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.
CVE-2026-47304
Critical · 9.8
CWE-345 Jul 14, 2026
.NET Security Feature Bypass Vulnerability
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-47303
High · 8.8
CWE-90 Jul 14, 2026
ASP.NET Core Elevation of Privilege Vulnerability
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2026-47302
High · 7.5
CWE-770 Jul 14, 2026
.NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-47300
High · 8.8
CWE-303 Jul 14, 2026
ASP.NET Core Elevation of Privilege Vulnerability
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2026-45591
High · 7.5
CWE-400 Jun 9, 2026
ASP.NET Core Denial of Service Vulnerability
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-32177
High · 7.3
CWE-20 May 12, 2026
.NET Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-32175
Medium · 4.3
CWE-22 May 12, 2026
.NET Core Tampering Vulnerability
A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories.
To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system.
The security update fixes the vulnerability by ensuring .NET Core properly handles files.
CVE-2026-32203
High · 7.5
CWE-20 Apr 14, 2026
.NET and Visual Studio Denial of Service Vulnerability
Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.