8.8
Élevée
CVE-2026-103572 Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server…
Description
Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Visual Studio 2022 version 17.14 17.14 | 17.14.0 → < 17.14.42 | 17.14.42 |
| Microsoft Visual Studio 2026 version 18.10 18.10 | 18.10.0 → < 18.10.4 | 18.10.4 |
Références
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft Visual Studio 2022 version 17.14
Les 92 CVE de Microsoft Visual Studio 2022 version 17.14 →
CVE-2026-118147
Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network
7.4
Élevée
CVE-2026-109468
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service…
7.5
Élevée
CVE-2026-105016
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network
9.8
Critique
CVE-2026-70162
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests
5.9
Moyenne