8.8
High
CVE-2026-77906 Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network
Description
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Visual Studio 2026 version 18.9 18.9 | 18.9.0 → < 18.9.3 | 18.9.3 |
References
- Visual Studio Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Visual Studio 2026 version 18.9
The 9 CVEs of Microsoft Visual Studio 2026 version 18.9 →
CVE-2026-69806
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges…
7.0
High
CVE-2026-71328
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network
8.8
High
CVE-2026-69304
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny…
5.9
Medium
CVE-2026-69805
External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network
7.5
High