Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductVisual Studio 2026 (294f873c-086e-5422-9c42-f68f2b81f9f4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-40372 vulnerable 2026-06-08 08:01:20.404793 ASP.NET Core Elevation of Privilege Vulnerability
CRITICAL (9.1)
Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Published: 2026-04-21T19:20:50.215Z
Updated: 2026-07-15T02:45:28.657Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32203 vulnerable 2026-06-08 07:57:17.123355 .NET and Visual Studio Denial of Service Vulnerability
HIGH (7.5)
Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.
Published: 2026-04-14T16:58:38.178Z
Updated: 2026-07-15T01:08:25.314Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32177 vulnerable 2026-06-08 07:57:16.980032 .NET Elevation of Privilege Vulnerability
HIGH (7.3)
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
Published: 2026-05-12T16:58:15.551Z
Updated: 2026-07-15T01:08:30.133Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32175 vulnerable 2026-06-08 07:57:16.966755 .NET Core Tampering Vulnerability
MEDIUM (4.3)
A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system. The security update fixes the vulnerability by ensuring .NET Core properly handles files.
Published: 2026-05-12T16:59:01.649Z
Updated: 2026-06-19T16:12:35.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21257 vulnerable 2026-06-08 07:49:14.618988 GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability
HIGH (8)
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an authorized attacker to elevate privileges over a network.
Published: 2026-02-10T17:51:37.741Z
Updated: 2026-05-11T21:25:38.855Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21256 vulnerable 2026-06-08 07:49:14.617519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.