Microsoft ≫ Visual Studio 2026

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.