Vulnerabilidades do Microsoft Microsoft Visual Studio 2022 version 17.14

CVE-2026-70186 Alta · 7.5 CWE-833 13/10/2026

ASP.NET Core Denial of Service Vulnerability

Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-70183 Alta · 7.5 CWE-362 13/10/2026

ASP.NET Core Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

CVE-2026-70181 Alta · 7.5 CWE-770 13/10/2026

ASP.NET Core Denial of Service Vulnerability

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-70179 Alta · 7.5 CWE-290 13/10/2026

ASP.NET Core Elevation of Privilege Vulnerability

Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

CVE-2026-70175 Alta · 8.1 CWE-640 13/10/2026

ASP.NET Core Elevation of Privilege Vulnerability

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70174 Alta · 8.8 CWE-358 13/10/2026

.NET Remote Code Execution Vulnerability

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70165 Média · 6.7 CWE-59 13/10/2026

.NET Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-70162 Média · 5.9 CWE-405 13/10/2026

.NET Denial of Service Vulnerability

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application. The update addresses the vulnerability by correcting how the .NET web application handles web requests.

CVE-2026-70161 Alta · 7.3 CWE-22 13/10/2026

.NET Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-70159 Alta · 7.5 CWE-770 13/10/2026

ASP.NET Core Denial of Service Vulnerability

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-70035 Alta · 8.8 CWE-502 13/10/2026

.NET Framework Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

CVE-2026-70007 Alta · 8.8 CWE-787 13/10/2026

.NET Framework Remote Code Execution Vulnerability

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

CVE-2026-69651 Alta · 7.5 CWE-407 13/10/2026

.NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-66822 Média · 5.9 CWE-201 13/10/2026

.NET Information Disclosure Vulnerability

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.

CVE-2026-58280 Alta · 7.5 CWE-674 13/10/2026

.NET Denial of Service Vulnerability

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-105016 Crítica · 9.8 CWE-122 13/10/2026

Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

CVE-2026-103572 Alta · 8.8 CWE-94 13/10/2026

Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability

Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.

CVE-2026-102870 Alta · 8.8 CWE-94 13/10/2026

Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability

Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

CVE-2026-102869 Alta · 8.8 CWE-843 13/10/2026

.NET and Visual Studio Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-71328 Alta · 8.8 CWE-122 08/09/2026

.NET and Visual Studio Remote Code Execution Vulnerability

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

CVE-2026-69806 Alta · 7.0 CWE-94 08/09/2026

.NET Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-69805 Alta · 8.1 CWE-73 08/09/2026

.NET Elevation of Privilege Vulnerability

External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-69522 Alta · 8.8 CWE-122 08/09/2026

.NET and Visual Studio Remote Code Execution Vulnerability

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

CVE-2026-69439 Alta · 8.8 CWE-122 08/09/2026

.NET and Visual Studio Elevation of Privilege Vulnerability

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-69304 Média · 5.9 CWE-409 08/09/2026

ASP.NET Core Denial of Service Vulnerability

Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.