Microsoft Visual Studio 2026 Version 18.10 vulnerabilities
44 vulnerabilities
Known vulnerabilities in Microsoft Visual Studio 2026 Version 18.10, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-109468microsoftmicrosoft visual studio 2022 version 17.14+2
EPSS score0.65%
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-103572microsoftmicrosoft visual studio 2022 version 17.14+1EPSS score0.82%
Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.CVE-2026-96957microsoftmicrosoft visual studio 2022 version 17.14+6EPSS score0.45%
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-96238microsoftmicrosoft visual studio 2022 version 17.14+5EPSS score0.24%
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-96237microsoftmicrosoft visual studio 2022 version 17.14+4EPSS score0.55%
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-96236chainguarddotnet-bootstrap-8+20EPSS score1.06%
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-96235microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.74%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-96234microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.28%
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-96232microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.69%
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-96231chainguarddotnet-bootstrap-8+17EPSS score0.34%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-96230microsoftmicrosoft visual studio 2022 version 17.14+3EPSS score0.78%
Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.CVE-2026-96229microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.81%
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-96225chainguarddotnet-bootstrap-8+17EPSS score0.34%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-96224microsoftmicrosoft .net framework 3.5+16EPSS score0.74%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-96222chainguarddotnet-8-sdk+26EPSS score0.58%
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.CVE-2026-88092chainguarddotnet-bootstrap-8+23EPSS score0.79%
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.CVE-2026-87697microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.84%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-85790microsoftmicrosoft visual studio 2022 version 17.14+19EPSS score0.69%
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.CVE-2026-85363microsoftmicrosoft .net framework 3.5+16EPSS score0.74%
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.CVE-2026-84008chainguardactions-runner+35EPSS score0.77%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.