Microsoft Visual Studio 2026 Version 18.9 vulnerabilities
9 known vulnerabilities affecting microsoft/microsoft_visual_studio_2026_version_18.9.
Total CVEs
9
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH7MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2026-69439P3HIGHCVSS 8.8≥ 18.9.0, < 18.9.32026-09-08
CVE-2026-69439 [HIGH] CWE-122 CVE-2026-69439: Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate priv
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-69522P3HIGHCVSS 8.8≥ 18.9.0, < 18.9.32026-09-08
CVE-2026-69522 [HIGH] CWE-122 CVE-2026-69522: Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-71328P3HIGHCVSS 8.8≥ 18.9.0, < 18.9.32026-09-08
CVE-2026-71328 [HIGH] CWE-122 CVE-2026-71328: Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-77907P3HIGHCVSS 8.8≥ 18.9.0, < 18.9.32026-09-08
CVE-2026-77907 [HIGH] CWE-122 CVE-2026-77907: Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-77906P3HIGHCVSS 8.8≥ 18.9.0, < 18.9.32026-09-08
CVE-2026-77906 [HIGH] CWE-122 CVE-2026-77906: Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69805P3HIGHCVSS 8.1≥ 18.9.0, < 18.9.32026-09-08
CVE-2026-69805 [HIGH] CWE-73 CVE-2026-69805: External control of file name or path in .NET allows an unauthorized attacker to elevate privileges
External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-69806P3HIGHCVSS 7.0≥ 18.9.0, < 18.9.32026-09-08
CVE-2026-69806 [HIGH] CWE-94 CVE-2026-69806: Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-58649P3MEDIUMCVSS 6.5≥ 18.9.0, < 18.9.32026-09-08
CVE-2026-58649 [MEDIUM] CWE-346 CVE-2026-58649: Origin validation error in .NET allows an unauthorized attacker to disclose information over a netwo
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-69304P3MEDIUMCVSS 5.9≥ 18.9.0, < 18.9.32026-09-08
CVE-2026-69304 [MEDIUM] CWE-409 CVE-2026-69304: Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthori
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
nvd