Known vulnerabilities in Visual Studio - page 16

Vendor: Microsoft
Software: Visual Studio
Software CPE: cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*
Total vulnerabilities: 311
Public exploits: 13
Known exploited (KEV): 7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Visual Studio Visual Studio is affected by 311 known vulnerabilities: 2 critical, 105 high, 117 medium, 87 low Critical High Medium Low

Vulnerabilities (311)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU159397 - Improper Certificate Validation
CVE-2026-118147
CWE-295 Medium
No
No
17.14.44 05.11.2026 SB2026110534
#VU159376 - Allocation of Resources Without Limits or Throttling
CVE-2026-109468
CWE-770 Medium
No
No
17.14.42 05.11.2026 SB2026101415
#VU155541 - Improper Verification of Cryptographic Signature
CVE-2026-96957
CWE-347 High
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 2 more
#VU155438 - Origin Validation Error
CVE-2026-96238
CWE-346 Medium
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more
#VU155437 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-96237
CWE-829 Medium
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more
#VU155436 - Allocation of Resources Without Limits or Throttling
CVE-2026-96236
CWE-770 Medium
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more
#VU155435 - Out-of-bounds write
CVE-2026-96235
CWE-787 High
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 5 more
#VU155434 - Origin Validation Error
CVE-2026-96234
CWE-346 Medium
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 5 more
#VU155432 - Out-of-bounds read
CVE-2026-96232
CWE-125 Medium
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 5 more
#VU155431 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-96231
CWE-59 Low
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more
#VU155430 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-96230
CWE-79 Medium
No
No
17.14.42 14.10.2026 SB2026101415
SB20261015156
SB20261015157
and 11 more


Showing elements 301 - 320 out of 311