Known vulnerabilities in Visual Studio

Vendor: Microsoft
Software: Visual Studio
Software CPE: cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 265
Public exploits: 13
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Visual Studio Visual Studio is affected by 265 known vulnerabilities: 2 critical, 89 high, 91 medium, 83 low Critical High Medium Low

Vulnerabilities (265)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148467 - Heap-based Buffer Overflow
CVE-2026-77907		 CWE-122 High
No
No
 18.9.3 09.09.2026 SB2026090951
#VU148466 - Heap-based Buffer Overflow
CVE-2026-77906		 CWE-122 High
No
No
 18.9.3 09.09.2026 SB2026090951
#VU148055 - Heap-based Buffer Overflow
CVE-2026-71328		 CWE-122 High
No
No
 17.14.40 09.09.2026 SB2026090910
SB20260914139
SB20260914140
and 5 more
#VU147965 - Exposure of sensitive information to an unauthorized actor
CVE-2026-69806		 CWE-200 Low
No
No
 17.14.40 08.09.2026 SB2026090910
SB20260914139
SB20260914140
and 8 more
#VU147964 - External Control of File Name or Path
CVE-2026-69805		 CWE-73 Medium
No
No
 17.14.40 08.09.2026 SB2026090910
#VU147767 - Heap-based Buffer Overflow
CVE-2026-69522		 CWE-122 High
No
No
 17.14.40 08.09.2026 SB2026090910
SB20260914139
SB20260914140
and 5 more
#VU147695 - Heap-based Buffer Overflow
CVE-2026-69439		 CWE-122 High
No
No
 17.14.40 08.09.2026 SB2026090910
SB20260914139
SB20260914140
and 5 more
#VU147576 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-69304		 CWE-409 Medium
No
No
 17.14.40 08.09.2026 SB2026090910
SB20260914139
SB20260914140
and 5 more
#VU147478 - Origin Validation Error
CVE-2026-58649		 CWE-346 Medium
No
No
 17.14.40 08.09.2026 SB2026090910
SB20260914139
SB20260914140
and 13 more
#VU142006 - Use After Free
CVE-2026-62898		 CWE-416 Medium
No
No
 17.14.38 12.08.2026 SB20260812233
SB2026081416
SB2026081417
and 4 more
#VU141930 - Integer overflow
CVE-2026-62886		 CWE-190 High
No
No
 17.14.38 12.08.2026 SB20260812233
SB2026081416
SB2026081417
and 4 more
#VU141923 - Out-of-bounds write
CVE-2026-62871		 CWE-787 High
No
No
 17.14.38 12.08.2026 SB20260812233
SB2026081416
SB2026081417
and 4 more
#VU141795 - Unchecked Return Value
CVE-2026-62909		 CWE-252 Low
No
No
 17.14.38 12.08.2026 SB20260812233
SB2026081360
SB2026081364
and 11 more
#VU141793 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-62902		 CWE-829 Medium
No
No
 17.14.38 12.08.2026 SB20260812233
SB2026081416
SB2026081417
and 4 more
#VU141792 - Unchecked Input for Loop Condition
CVE-2026-62901		 CWE-606 Medium
No
No
 17.14.38 12.08.2026 SB20260812233
SB2026081360
SB2026081364
and 11 more
#VU141791 - Improper Removal of Sensitive Information Before Storage or Transfer
CVE-2026-62900		 CWE-212 Medium
No
No
 17.14.38 12.08.2026 SB20260812233
SB2026081360
SB2026081364
and 11 more
#VU141790 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-62899		 CWE-444 Medium
No
No
 17.14.38 12.08.2026 SB20260812233
SB2026081360
SB2026081364
and 11 more
#VU141789 - Integer overflow
CVE-2026-62897		 CWE-190 Medium
No
No
 17.14.38 12.08.2026 SB20260812233
SB2026081416
SB2026081417
and 4 more
#VU141498 - Out-of-bounds write
CVE-2026-70354		 CWE-787 High
No
No
 17.14.38 11.08.2026 SB2026081155
SB2026081416
SB2026081417
and 4 more
#VU137945 - Improper input validation
CVE-2026-50524		 CWE-20 Medium
No
No
 17.12.22 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more


Showing elements 1 - 20 out of 265