Known vulnerabilities in Visual Studio - page 15

Vendor: Microsoft
Software: Visual Studio
Software CPE: cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*
Total vulnerabilities: 311
Public exploits: 13
Known exploited (KEV): 7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Visual Studio Visual Studio is affected by 311 known vulnerabilities: 2 critical, 105 high, 117 medium, 87 low Critical High Medium Low

Vulnerabilities (311)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155429 - Permissive List of Allowed Inputs
CVE-2026-96229
CWE-183 Medium
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 5 more
#VU155428 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-96225
CWE-59 Low
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more
#VU155427 - Out-of-bounds write
CVE-2026-96224
CWE-787 High
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 5 more
#VU155425 - Improper Certificate Validation
CVE-2026-96222
CWE-295 Medium
No
No
17.14.42 14.10.2026 SB2026101415
SB2026101684
SB2026101685
and 5 more
#VU155402 - Improperly Controlled Sequential Memory Allocation
CVE-2026-92707
CWE-1325 Medium
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more
#VU155297 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-88092
CWE-444 Medium
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more
#VU155262 - Deserialization of Untrusted Data
CVE-2026-87697
CWE-502 High
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 5 more
#VU155140 - Use After Free
CVE-2026-85790
CWE-416 Medium
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 5 more
#VU155125 - Integer overflow
CVE-2026-85363
CWE-190 High
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 5 more
#VU155081 - Inefficient Algorithmic Complexity
CVE-2026-84008
CWE-407 Medium
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 6 more
#VU154754 - Deserialization of Untrusted Data
CVE-2026-83520
CWE-502 High
No
No
17.14.42 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 5 more
#VU154634 - Out-of-bounds write
CVE-2026-70197
CWE-787 High
No
No
17.14.42 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 5 more
#VU154633 - Inefficient Algorithmic Complexity
CVE-2026-70196
CWE-407 Medium
No
No
17.14.42 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more
#VU154631 - Improper Certificate Validation
CVE-2026-70194
CWE-295 Medium
No
No
17.14.42 14.10.2026 SB2026101402
SB2026103080
#VU154630 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-70190
CWE-59 Medium
No
No
17.14.42 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 3 more
#VU154629 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-70188
CWE-444 High
No
No
17.14.42 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more
#VU154627 - Deadlock
CVE-2026-70186
CWE-833 Medium
No
No
17.14.42 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more
#VU154624 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-70183
CWE-362 Low
No
No
17.14.42 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more
#VU154623 - Allocation of Resources Without Limits or Throttling
CVE-2026-70181
CWE-770 Medium
No
No
17.14.42 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more
#VU154622 - Authentication Bypass by Spoofing
CVE-2026-70179
CWE-290 Low
No
No
17.14.42 14.10.2026 SB2026101402
SB20261015156
SB20261015157
and 11 more


Showing elements 281 - 300 out of 311