Vulnerabilidades de microsoft visual studio 2022 (CVE)

Registros CVE publicados para microsoft visual studio 2022, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

184 resultados
7.5Alta
CVE-2026-114157

ASP.NET Core Security Feature Bypass Vulnerability

Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Windows; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Windows

Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges locally.

7.5Alta
CVE-2026-114154

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 installed on Windows; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Windows; Microsoft Microsoft Visual Studio 2022 version 17.14

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

1.3%EPSS
7.5Alta
CVE-2026-114149

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

1.3%EPSS
7.5Alta
CVE-2026-114147

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service over a network.

1.3%EPSS
9.0Crítica
CVE-2026-114146

ASP.NET Core Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

7.5Alta
CVE-2026-109478

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 8.0 installed on Linux; Microsoft .NET 8.0 installed on Mac OS; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Linux

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

1.2%EPSS
6.1Media
CVE-2026-109476

ASP.NET Core Information Disclosure Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network.

7.5Alta
CVE-2026-105544

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Improper access control in .NET allows an authorized attacker to elevate privileges locally.

7.4Alta
CVE-2026-118147

Visual Studio Spoofing Vulnerability

Microsoft Microsoft Visual Studio 2017 version 15.9; Microsoft Microsoft Visual Studio 2019 version 16.11; Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.11

Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

7.5Alta
CVE-2026-109468

ASP.NET Core Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.10; Microsoft System.Formats.Cbor

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

5.9Media
CVE-2026-70162

.NET Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.10; Microsoft System.Security.Cryptography.Pkcs

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthent…

8.8Alta
CVE-2026-102869

.NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8; Microsoft Microsoft .NET Framework 3.5 AND 4.8.1

Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

8.8Alta
CVE-2026-102870

ASP.NET Core Remote Code Execution Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

7.5Alta
CVE-2026-58280

.NET Denial of Service Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

1.2%EPSS
8.8Alta
CVE-2026-96957

.NET Security Feature Bypass Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.10

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

6.5Media
CVE-2026-96238

.NET Security Feature Bypass Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.

7.5Alta
CVE-2026-96237

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

8.8Alta
CVE-2026-96235

.NET Remote Code Execution Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

5.3Media
CVE-2026-96234

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

7.5Alta
CVE-2026-96232

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.

7.8Alta
CVE-2026-96231

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

8.8Alta
CVE-2026-96230

ASP.NET Core Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.10; Microsoft Microsoft.AspNetCore.Components.WebAssembly.Server

Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

6.5Media
CVE-2026-96229

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.

7.8Alta
CVE-2026-96225

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.