Improper access control in Visual Studio - CVE-2026-105544
Published: November 10, 2026
Vulnerability identifier: #VU164668
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-105544
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges locally and gain the rights of the user running the affected application.
The vulnerability exists due to improper access control in .NET when an affected application is running. A local user can exploit a race condition, with user interaction, to gain the rights of the user running the affected application.
Affected software
Visual Studio
How to mitigate CVE-2026-105544
Install security update from vendor's website.
Visual Studio - update to 17.14.45