microsoft visual studio 2026 güvenlik açıkları (CVE)

microsoft visual studio 2026 için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

46 sonuç
8.8Yüksek
CVE-2026-96957

.NET Security Feature Bypass Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.10

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

9.4Kritik
CVE-2026-88092

ASP.NET Core Tampering Vulnerability

Microsoft ASP.NET Core 10.0; Microsoft ASP.NET Core 11.0; Microsoft ASP.NET Core 8.0; Microsoft ASP.NET Core 9.0

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.

7.4Yüksek
CVE-2026-96222

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Microsoft Microsoft .NET Framework 3.5; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8

Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

5.9Orta
CVE-2026-85790

Microsoft QUIC Information Disclosure Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.10; Microsoft Microsoft.Native.Quic.MsQuic.Schannel; Microsoft Windows 11 version 23H2

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

7.0Yüksek
CVE-2026-69806

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

5.9Orta
CVE-2026-69304

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft ASP.NET Core 10.0

Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

7.5Yüksek
CVE-2026-69805

.NET Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.9; Microsoft Microsoft.Diagnostics.Runtime

External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.

6.5Orta
CVE-2026-58649

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 11.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

7.5Yüksek
CVE-2026-62898

Microsoft QUIC Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

1.0%EPSS
7.8Yüksek
CVE-2026-62886

.NET Elevation of Privilege Vulnerability

Microsoft Microsoft .NET Framework 3.5; Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.7.2; Microsoft Microsoft .NET Framework 3.5 AND 4.8

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

7.8Yüksek
CVE-2026-62871

.NET Elevation of Privilege Vulnerability

Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.8

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

7.8Yüksek
CVE-2026-62909

.NET Elevation of Privilege Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

6.5Orta
CVE-2026-62902

.NET Information Disclosure Vulnerability

Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14; Microsoft Microsoft Visual Studio 2026 version 18.8

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.

7.5Yüksek
CVE-2026-62901

.NET Denial of Service Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

1.2%EPSS
5.9Orta
CVE-2026-62900

.NET Information Disclosure Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

5.9Orta
CVE-2026-62899

.NET Security Feature Bypass Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.14

Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.

6.5Orta
CVE-2026-50659

.NET Spoofing Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft .NET Framework 3.5

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

7.5Yüksek
CVE-2026-50651

.NET Denial of Service Vulnerability

Microsoft .NET 10.0 runtime; Microsoft .NET 8.0 runtime; Microsoft .NET 9.0 runtime; Microsoft Microsoft Visual Studio 2022 version 17.12

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

1.2%EPSS