microsoft visual studio 2022 Schwachstellen (CVE)

Für microsoft visual studio 2022 veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

184 Ergebnisse
7.5Hoch
CVE-2026-114157

ASP.NET Core Security Feature Bypass Vulnerability

Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Windows; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Windows

Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges locally.

7.5Hoch
CVE-2026-114154

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 installed on Windows; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Windows; Microsoft Microsoft Visual Studio 2022 version 17.14

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

7.5Hoch
CVE-2026-114149

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

7.5Hoch
CVE-2026-114147

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service over a network.

9.0Kritisch
CVE-2026-114146

ASP.NET Core Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

7.5Hoch
CVE-2026-109478

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 8.0 installed on Linux; Microsoft .NET 8.0 installed on Mac OS; Microsoft .NET 8.0 installed on Windows; Microsoft Microsoft Visual Studio 2022 version 17.14

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

6.1Mittel
CVE-2026-109476

ASP.NET Core Information Disclosure Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network.

7.5Hoch
CVE-2026-105544

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Improper access control in .NET allows an authorized attacker to elevate privileges locally.

7.4Hoch
CVE-2026-118147

Visual Studio Spoofing Vulnerability

Microsoft Microsoft Visual Studio 2017 version 15.9; Microsoft Microsoft Visual Studio 2019 version 16.11; Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.11

Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

7.5Hoch
CVE-2026-109468

ASP.NET Core Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.10; Microsoft System.Formats.Cbor

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

5.9Mittel
CVE-2026-70162

.NET Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.10; Microsoft System.Security.Cryptography.Pkcs

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthent…

8.8Hoch
CVE-2026-102869

.NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8; Microsoft Microsoft .NET Framework 3.5 AND 4.8.1

Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

8.8Hoch
CVE-2026-102870

ASP.NET Core Remote Code Execution Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

7.5Hoch
CVE-2026-58280

.NET Denial of Service Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

1.2%EPSS
8.8Hoch
CVE-2026-96957

.NET Security Feature Bypass Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.10

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

6.5Mittel
CVE-2026-96238

.NET Security Feature Bypass Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.

7.5Hoch
CVE-2026-96237

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

8.8Hoch
CVE-2026-96235

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

5.3Mittel
CVE-2026-96234

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

7.5Hoch
CVE-2026-96232

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.

7.8Hoch
CVE-2026-96231

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

8.8Hoch
CVE-2026-96230

ASP.NET Core Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.10; Microsoft Microsoft.AspNetCore.Components.WebAssembly.Server

Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

6.5Mittel
CVE-2026-96229

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.

7.8Hoch
CVE-2026-96225

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.