Microsoft Visual Studio 2026 Version 18.5 vulnerabilities
4 vulnerabilities
Known vulnerabilities in Microsoft Visual Studio 2026 Version 18.5, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-40372ubuntudotnet10+5
EPSS score0.82%
Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.CVE-2026-47304chainguardaspnet-8-targeting-pack+42EPSS score0.29%
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-32177ubuntudotnet7+16EPSS score0.57%
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.CVE-2026-32175ubuntudotnet7+13EPSS score0.64%
A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories.
To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system.
The security update fixes the vulnerability by ensuring .NET Core properly handles files.