7.8
High
CVE-2026-47305 Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally
Description
Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Visual Studio 2022 version 17.12 17.12 | 17.12.0 → < 17.12.22 | 17.12.22 |
| Microsoft Visual Studio 2022 version 17.14 17.14 | 17.14.0 → < 17.14.36 | 17.14.36 |
| Microsoft Visual Studio 2026 version 18.7 18.0 | 18.0 → < 18.7.4 | 18.7.4 |
References
- Visual Studio Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Visual Studio 2022 version 17.12
The 42 CVEs of Microsoft Visual Studio 2022 version 17.12 →
CVE-2026-50659
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network
6.5
Medium
CVE-2026-50651
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a…
7.5
High
CVE-2026-50650
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate…
7.8
High
CVE-2026-50649
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally
7.8
High