Microsoft Visual Studio 2022 Version 17.14 vulnerabilities, page 2
90 vulnerabilities
Known vulnerabilities in Microsoft Visual Studio 2022 Version 17.14, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-83520ubuntudotnet7+17
EPSS score1.27%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-70197ubuntudotnet7+9EPSS score0.69%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-70196chainguarddotnet-bootstrap-8+24EPSS score0.80%
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-70194ubuntudotnet11+12EPSS score0.43%
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-70190ubuntudotnet7+5EPSS score0.46%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-70188chainguarddotnet-bootstrap-8+25EPSS score0.83%
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-70186chainguarddotnet-bootstrap-8+23EPSS score0.85%
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-70183chainguarddotnet-bootstrap-8+26EPSS score0.46%
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.CVE-2026-70181chainguarddotnet-bootstrap-8+24EPSS score1.06%
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-70179ubuntudotnet10+7EPSS score0.56%
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.CVE-2026-70175chainguarddotnet-bootstrap-8+24EPSS score0.64%
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.CVE-2026-70174ubuntudotnet7+17EPSS score0.80%
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-70165ubuntudotnet7+5EPSS score0.35%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-70162chainguardactions-runner+28EPSS score0.77%
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application.
The update addresses the vulnerability by correcting how the .NET web application handles web requests.CVE-2026-70161ubuntudotnet7+5EPSS score0.46%
Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-70159chainguardaspnet-8-targeting-pack+18EPSS score1.06%
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-70035ubuntudotnet7+17EPSS score1.27%
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.CVE-2026-70007ubuntudotnet7+17EPSS score0.64%
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.CVE-2026-69651chainguarddotnet-bootstrap-8+33EPSS score1.10%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-66822chainguarddotnet-bootstrap-8+25EPSS score0.67%
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.