Microsoft Visual Studio 2026 Version 18.10 vulnerabilities, page 2
44 vulnerabilities
Known vulnerabilities in Microsoft Visual Studio 2026 Version 18.10, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-83520microsoftmicrosoft .net framework 3.5+16
EPSS score1.27%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-70197microsoftmicrosoft visual studio 2022 version 17.14+8EPSS score0.69%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-70196chainguarddotnet-bootstrap-8+20EPSS score0.80%
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-70194microsoftmicrosoft visual studio 2022 version 17.14+10EPSS score0.43%
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-70190microsoftmicrosoft visual studio 2022 version 17.14+4EPSS score0.46%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-70188chainguarddotnet-bootstrap-8+20EPSS score0.83%
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-70186chainguarddotnet-bootstrap-8+19EPSS score0.85%
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-70183chainguarddotnet-bootstrap-8+21EPSS score0.46%
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.CVE-2026-70181chainguarddotnet-bootstrap-8+20EPSS score1.06%
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-70179microsoftmicrosoft visual studio 2022 version 17.14+3EPSS score0.56%
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.CVE-2026-70175chainguarddotnet-bootstrap-8+20EPSS score0.64%
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.CVE-2026-70174microsoftmicrosoft .net framework 3.5+16EPSS score0.80%
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-70165microsoftmicrosoft visual studio 2022 version 17.14+4EPSS score0.35%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-70162chainguardactions-runner+27EPSS score0.77%
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application.
The update addresses the vulnerability by correcting how the .NET web application handles web requests.CVE-2026-70161microsoftmicrosoft visual studio 2022 version 17.14+4EPSS score0.46%
Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-70159chainguardaspnet-8-targeting-pack+13EPSS score1.06%
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-70035microsoftmicrosoft .net framework 3.5+16EPSS score1.27%
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.CVE-2026-70007microsoftmicrosoft .net framework 3.5+16EPSS score0.64%
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.CVE-2026-69651chainguarddotnet-bootstrap-8+28EPSS score1.10%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-66822chainguarddotnet-bootstrap-8+20EPSS score0.67%
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.