Microsoft Visual Studio 2026 Version 18.8 vulnerabilities
10 vulnerabilities
Known vulnerabilities in Microsoft Visual Studio 2026 Version 18.8, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-62871ubuntudotnet7+10
EPSS score0.47%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.CVE-2026-62901chainguarddotnet-bootstrap-8+26EPSS score1.23%
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-62886ubuntudotnet7+19EPSS score0.47%
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.CVE-2026-62902ubuntudotnet7+10EPSS score0.87%
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-62900chainguarddotnet-sdk-10.0.2+15EPSS score0.75%
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-62897ubuntudotnet7+16EPSS score0.37%
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.CVE-2026-62899chainguarddotnet-bootstrap-8+23EPSS score0.75%
Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-62909chainguarddotnet-bootstrap-8+23EPSS score0.26%
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-62898ubuntudotnet7+11EPSS score1.03%
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.CVE-2026-70354ubuntudotnet7+20EPSS score0.36%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.