Microsoft Visual Studio 2026 Version 18.7 vulnerabilities
16 vulnerabilities
Known vulnerabilities in Microsoft Visual Studio 2026 Version 18.7, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-47305microsoftmicrosoft visual studio 2022 version 17.12+4
EPSS score0.47%
Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.CVE-2026-47303ubuntudotnet10+13EPSS score0.84%
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.CVE-2026-47300ubuntudotnet10+13EPSS score0.78%
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.CVE-2026-47304chainguardaspnet-8-targeting-pack+42EPSS score0.29%
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-47302chainguardaspnet-8-targeting-pack+48EPSS score1.17%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-50524chainguarddotnet-bootstrap-8+28EPSS score1.23%
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-50648chainguardaspnet-8-targeting-pack+36EPSS score1.17%
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-50651chainguarddotnet-bootstrap-8+28EPSS score1.17%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-50650ubuntudotnet7+16EPSS score0.46%
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.CVE-2026-50646ubuntudotnet7+18EPSS score4.02%
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.CVE-2026-50527chainguarddotnet-bootstrap-8+26EPSS score1.17%
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.CVE-2026-50659chainguarddotnet-bootstrap-8+36EPSS score0.74%
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.CVE-2026-50649ubuntudotnet7+13EPSS score4.02%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.CVE-2026-50525chainguardaspnet-8-targeting-pack+37EPSS score1.17%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-50528chainguarddotnet-bootstrap-8+28EPSS score0.61%
Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-50526ubuntudotnet10+13EPSS score0.22%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.