Microsoft Visual Studio

11 known vulnerabilities in Microsoft Visual Studio, 2 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2023-38180 CVSS 7.5 high · actively exploited Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
  • CVE-2020-1147 CVSS 7.8 high · actively exploited Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

Latest vulnerabilities

  • CVE-2026-77907 CVSS 8.8 high Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
  • CVE-2026-77906 CVSS 8.8 high Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
  • CVE-2026-71328 CVSS 8.8 high Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69806 CVSS 7.0 high Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
  • CVE-2026-69805 CVSS 8.1 high External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.
  • CVE-2026-69522 CVSS 8.8 high Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69439 CVSS 8.8 high Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
  • CVE-2026-69304 CVSS 5.9 medium Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a…
  • CVE-2026-58649 CVSS 6.5 medium Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
  • CVE-2023-38180 CVSS 7.5 high · actively exploited Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
  • CVE-2020-1147 CVSS 7.8 high · actively exploited Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability