Vulnerabilidades de microsoft visual studio 2026 (CVE)

Registros CVE publicados para microsoft visual studio 2026, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

46 resultados
8.8Alta
CVE-2026-96957

.NET Security Feature Bypass Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.10

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

9.4Crítica
CVE-2026-88092

ASP.NET Core Tampering Vulnerability

Microsoft ASP.NET Core 10.0; Microsoft ASP.NET Core 11.0; Microsoft ASP.NET Core 8.0; Microsoft ASP.NET Core 9.0

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.

7.4Alta
CVE-2026-96222

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Microsoft Microsoft .NET Framework 3.5; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8

Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

5.9Media
CVE-2026-85790

Microsoft QUIC Information Disclosure Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.10; Microsoft Microsoft.Native.Quic.MsQuic.Schannel; Microsoft Windows 11 version 23H2

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

7.0Alta
CVE-2026-69806

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

5.9Media
CVE-2026-69304

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft ASP.NET Core 10.0

Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

7.5Alta
CVE-2026-69805

.NET Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.9; Microsoft Microsoft.Diagnostics.Runtime

External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.

6.5Media
CVE-2026-58649

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

7.5Alta
CVE-2026-62898

Microsoft QUIC Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

1.0%EPSS
7.8Alta
CVE-2026-62886

.NET Elevation of Privilege Vulnerability

Microsoft Microsoft .NET Framework 3.5; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

7.8Alta
CVE-2026-62871

.NET Elevation of Privilege Vulnerability

Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.8

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

7.8Alta
CVE-2026-62909

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

6.5Media
CVE-2026-62902

.NET Information Disclosure Vulnerability

Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.8

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.

7.5Alta
CVE-2026-62901

.NET Denial of Service Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

1.2%EPSS
5.9Media
CVE-2026-62900

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

5.9Media
CVE-2026-62899

.NET Security Feature Bypass Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.

6.5Media
CVE-2026-50659

.NET Spoofing Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft .NET Framework 3.5

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

7.5Alta
CVE-2026-50651

.NET Denial of Service Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.12

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

1.2%EPSS