Vulnerabilities of Microsoft Microsoft Visual Studio 2026 version 18.9

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-69806	Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges…	7.0 High	Sep 8, 2026
CVE-2026-77906	Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network	8.8 High	Sep 8, 2026
CVE-2026-71328	Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network	8.8 High	Sep 8, 2026
CVE-2026-69304	Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny…	5.9 Medium	Sep 8, 2026
CVE-2026-58649	Origin validation error in .NET allows an unauthorized attacker to disclose information over a network	6.5 Medium	Sep 8, 2026
CVE-2026-69805	External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network	7.5 High	Sep 8, 2026
CVE-2026-69439	Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a…	8.8 High	Sep 8, 2026
CVE-2026-77907	Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network	8.8 High	Sep 8, 2026
CVE-2026-69522	Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network	8.8 High	Sep 8, 2026