Microsoft Visual Studio 2026 Version 18.9 vulnerabilities
9 vulnerabilities
Known vulnerabilities in Microsoft Visual Studio 2026 Version 18.9, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-71328ubuntudotnet7+10
EPSS score0.76%
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.CVE-2026-77906microsoftmicrosoft visual studio 2026 version 18.9+1EPSS score0.82%
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.CVE-2026-77907microsoftmicrosoft visual studio 2026 version 18.9+1EPSS score0.82%
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.CVE-2026-58649ubuntudotnet10+39EPSS score0.27%
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-69522ubuntudotnet7+14EPSS score0.91%
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.CVE-2026-69805microsoftmicrosoft visual studio 2022 version 17.14+4EPSS score0.50%
External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.CVE-2026-69806ubuntudotnet10+10EPSS score0.76%
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.CVE-2026-69304chainguardaspnet-8-targeting-pack+20EPSS score0.88%
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-69439ubuntudotnet7+10EPSS score0.84%
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.