Vulnerability-Lookup

WID-SEC-W-2026-2324

Vulnerability from csaf_certbund - Published: 2026-07-14 22:00 - Updated: 2026-07-21 22:00

Summary

Microsoft DeveloperTools: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Visual Studio Code ist ein Quelltext-Editor von Microsoft. Microsoft .NET Framework ist eine Komponente des Microsoft Windows-Betriebssystems, das die Erstellung und Ausführung von Softwareanwendungen und Webdiensten ermöglicht. Es beinhaltet sowohl eine Laufzeitumgebung als auch ein Framework von Klassenbibliotheken (APIs), u. a. für die Programmiersprache ASP (ASP.NET), den Datenzugriff (ADO.NET), intelligente Clientanwendungen (Windows Forms) und weitere. Microsoft .NET ist ein Software-Framework für die Entwicklung und Ausführung von Anwendungen. Microsoft Visual Studio ist eine integrierte Entwicklungsumgebung für Hochsprachen.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio Code, .NET Framework, Microsoft .NET, Visual Studio 2022 und Visual Studio 2026 ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen, einen Denial-of-Service-Zustand auszulösen oder Spoofing-Angriffe durchzuführen.

Betroffene Betriebssysteme: - Linux - MacOS X - Windows

CVE-2026-45496

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-45646

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-47282

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-47300

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-47302

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-47303

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-47304

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-47305

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-50506

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-50520

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-50524

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-50525

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-50526

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-50527

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-50528

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-50646

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-50648

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-50649

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-50650

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-50651

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-50659

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-56170

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-57101

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-57102

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

CVE-2026-57108

Affected products

Known affected 15 products

Product	Identifier	Version
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Microsoft Visual Studio 2022 version 17.12 Microsoft / Visual Studio 2022		version 17.12
Microsoft .NET Framework 4.7.2 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.7.2`	4.7.2
Microsoft Visual Studio 2022 version 17.14 Microsoft / Visual Studio 2022		version 17.14
Microsoft Visual Studio 2026 version 18.7 Microsoft / Visual Studio 2026		version 18.7
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Microsoft .NET Framework 4.8 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8`	4.8
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Microsoft .NET 8.0 Microsoft / .NET	`cpe:/a:microsoft:.net:8.0`	8
Microsoft Visual Studio Code Microsoft	`cpe:/a:microsoft:visual_studio_code:-`	—
Microsoft .NET Framework 3.5 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:3.5`	3.5
Microsoft .NET Framework 4.8.1 Microsoft / .NET Framework	`cpe:/a:microsoft:.net_framework:4.8.1`	4.8.1
Microsoft .NET 10.0 Microsoft / .NET	`cpe:/a:microsoft:.net:10.0`	10
Microsoft .NET 9.0 Microsoft / .NET	`cpe:/a:microsoft:.net:9.0`	9
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—

References

47 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://msrc.microsoft.com/update-guide/	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://ubuntu.com/security/notices/USN-8553-1	external
https://access.redhat.com/errata/RHSA-2026:39952	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://linux.oracle.com/errata/ELSA-2026-41895.html	external
https://linux.oracle.com/errata/ELSA-2026-41896.html	external
https://linux.oracle.com/errata/ELSA-2026-41897.html	external
https://linux.oracle.com/errata/ELSA-2026-41898.html	external
https://linux.oracle.com/errata/ELSA-2026-41899.html	external
https://access.redhat.com/errata/RHSA-2026:42145	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://linux.oracle.com/errata/ELSA-2026-41901.html	external
https://linux.oracle.com/errata/ELSA-2026-41900.html	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://linux.oracle.com/errata/ELSA-2026-41894.html	external
https://linux.oracle.com/errata/ELSA-2026-41893.html	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Visual Studio Code ist ein Quelltext-Editor von Microsoft. \r\nMicrosoft .NET Framework ist eine Komponente des Microsoft Windows-Betriebssystems, das die Erstellung und Ausf\u00fchrung von Softwareanwendungen und Webdiensten erm\u00f6glicht. Es beinhaltet sowohl eine Laufzeitumgebung als auch ein Framework von Klassenbibliotheken (APIs), u. a. f\u00fcr die Programmiersprache ASP (ASP.NET), den Datenzugriff (ADO.NET), intelligente Clientanwendungen (Windows Forms) und weitere.\r\nMicrosoft .NET ist ein Software-Framework f\u00fcr die Entwicklung und Ausf\u00fchrung von Anwendungen.\r\nMicrosoft Visual Studio ist eine integrierte Entwicklungsumgebung f\u00fcr Hochsprachen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio Code, .NET Framework, Microsoft .NET, Visual Studio 2022 und Visual Studio 2026 ausnutzen, um erweiterte Berechtigungen, einschlie\u00dflich Administratorrechte, zu erlangen, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, Daten zu manipulieren oder offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen oder Spoofing-Angriffe durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- MacOS X\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-2324 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2324.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-2324 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2324"
      },
      {
        "category": "external",
        "summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates",
        "url": "https://msrc.microsoft.com/update-guide/"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-47282",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47282"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-45496",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45496"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-57102",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57102"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-57101",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57101"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-50520",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50520"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-41109",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41109"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-50648",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-50646",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-50650",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-50527",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-47302",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-56170",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-50524",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-50528",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-47300",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-47303",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-50525",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-50526",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-57108",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-50649",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-50659",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-50651",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50651"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-47305",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47305"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-47304",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-50506",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50506"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-45646",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45646"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-8553-1 vom 2026-07-16",
        "url": "https://ubuntu.com/security/notices/USN-8553-1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:39952 vom 2026-07-16",
        "url": "https://access.redhat.com/errata/RHSA-2026:39952"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-D6B061AD69 vom 2026-07-16",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-d6b061ad69"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-3AFD9D89F4 vom 2026-07-16",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-3afd9d89f4"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-F738966FC9 vom 2026-07-16",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-f738966fc9"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-D9817786D6 vom 2026-07-16",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-d9817786d6"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-41895 vom 2026-07-20",
        "url": "https://linux.oracle.com/errata/ELSA-2026-41895.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-41896 vom 2026-07-20",
        "url": "https://linux.oracle.com/errata/ELSA-2026-41896.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-41897 vom 2026-07-20",
        "url": "https://linux.oracle.com/errata/ELSA-2026-41897.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-41898 vom 2026-07-20",
        "url": "https://linux.oracle.com/errata/ELSA-2026-41898.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-41899 vom 2026-07-21",
        "url": "https://linux.oracle.com/errata/ELSA-2026-41899.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:42145 vom 2026-07-20",
        "url": "https://access.redhat.com/errata/RHSA-2026:42145"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-DA44C3870F vom 2026-07-21",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-da44c3870f"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-41901 vom 2026-07-21",
        "url": "https://linux.oracle.com/errata/ELSA-2026-41901.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-41900 vom 2026-07-21",
        "url": "https://linux.oracle.com/errata/ELSA-2026-41900.html"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-9AEF53FA96 vom 2026-07-21",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-9aef53fa96"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-41894 vom 2026-07-21",
        "url": "https://linux.oracle.com/errata/ELSA-2026-41894.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-41893 vom 2026-07-21",
        "url": "https://linux.oracle.com/errata/ELSA-2026-41893.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Microsoft DeveloperTools: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-07-21T22:00:00.000+00:00",
      "generator": {
        "date": "2026-07-22T09:20:39.455+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-2324",
      "initial_release_date": "2026-07-14T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-07-14T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-07-15T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Ubuntu, Red Hat und Fedora aufgenommen"
        },
        {
          "date": "2026-07-16T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Fedora aufgenommen"
        },
        {
          "date": "2026-07-20T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Oracle Linux und Red Hat aufgenommen"
        },
        {
          "date": "2026-07-21T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Fedora und Oracle Linux aufgenommen"
        }
      ],
      "status": "final",
      "version": "5"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Fedora Linux",
            "product": {
              "name": "Fedora Linux",
              "product_id": "74178",
              "product_identification_helper": {
                "cpe": "cpe:/o:fedoraproject:fedora:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Fedora"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "10",
                "product": {
                  "name": "Microsoft .NET 10.0",
                  "product_id": "T051615",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net:10.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "9",
                "product": {
                  "name": "Microsoft .NET 9.0",
                  "product_id": "T051616",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net:9.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "8",
                "product": {
                  "name": "Microsoft .NET 8.0",
                  "product_id": "T055115",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net:8.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": ".NET"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "4.8.1",
                "product": {
                  "name": "Microsoft .NET Framework 4.8.1",
                  "product_id": "1273212",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:4.8.1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "4.7.2",
                "product": {
                  "name": "Microsoft .NET Framework 4.7.2",
                  "product_id": "432556",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:4.7.2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "4.8",
                "product": {
                  "name": "Microsoft .NET Framework 4.8",
                  "product_id": "432557",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:4.8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "3.5",
                "product": {
                  "name": "Microsoft .NET Framework 3.5",
                  "product_id": "T056477",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:3.5"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": ".NET Framework"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "version 17.12",
                "product": {
                  "name": "Microsoft Visual Studio 2022 version 17.12",
                  "product_id": "T056577"
                }
              },
              {
                "category": "product_version_range",
                "name": "version 17.14",
                "product": {
                  "name": "Microsoft Visual Studio 2022 version 17.14",
                  "product_id": "T056578"
                }
              }
            ],
            "category": "product_name",
            "name": "Visual Studio 2022"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "version 18.7",
                "product": {
                  "name": "Microsoft Visual Studio 2026 version 18.7",
                  "product_id": "T056579"
                }
              }
            ],
            "category": "product_name",
            "name": "Visual Studio 2026"
          },
          {
            "category": "product_name",
            "name": "Microsoft Visual Studio Code",
            "product": {
              "name": "Microsoft Visual Studio Code",
              "product_id": "T056575",
              "product_identification_helper": {
                "cpe": "cpe:/a:microsoft:visual_studio_code:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T056236",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T055947",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-45496",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-45496"
    },
    {
      "cve": "CVE-2026-45646",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-45646"
    },
    {
      "cve": "CVE-2026-47282",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-47282"
    },
    {
      "cve": "CVE-2026-47300",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-47300"
    },
    {
      "cve": "CVE-2026-47302",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-47302"
    },
    {
      "cve": "CVE-2026-47303",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-47303"
    },
    {
      "cve": "CVE-2026-47304",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-47304"
    },
    {
      "cve": "CVE-2026-47305",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-47305"
    },
    {
      "cve": "CVE-2026-50506",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-50506"
    },
    {
      "cve": "CVE-2026-50520",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-50520"
    },
    {
      "cve": "CVE-2026-50524",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-50524"
    },
    {
      "cve": "CVE-2026-50525",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-50525"
    },
    {
      "cve": "CVE-2026-50526",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-50526"
    },
    {
      "cve": "CVE-2026-50527",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-50527"
    },
    {
      "cve": "CVE-2026-50528",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-50528"
    },
    {
      "cve": "CVE-2026-50646",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-50646"
    },
    {
      "cve": "CVE-2026-50648",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-50648"
    },
    {
      "cve": "CVE-2026-50649",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-50649"
    },
    {
      "cve": "CVE-2026-50650",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-50650"
    },
    {
      "cve": "CVE-2026-50651",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-50651"
    },
    {
      "cve": "CVE-2026-50659",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-50659"
    },
    {
      "cve": "CVE-2026-56170",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-56170"
    },
    {
      "cve": "CVE-2026-57101",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-57101"
    },
    {
      "cve": "CVE-2026-57102",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-57102"
    },
    {
      "cve": "CVE-2026-57108",
      "product_status": {
        "known_affected": [
          "T056236",
          "T056577",
          "432556",
          "T056578",
          "T056579",
          "67646",
          "432557",
          "74178",
          "T055115",
          "T056575",
          "T056477",
          "1273212",
          "T051615",
          "T051616",
          "T055947"
        ]
      },
      "release_date": "2026-07-14T22:00:00.000+00:00",
      "title": "CVE-2026-57108"
    }
  ]
}

CVE-2026-45496 (GCVE-0-2026-45496)

Vulnerability from cvelistv5 – Published: 2026-07-14 17:04 – Updated: 2026-08-03 22:53

Title

Visual Studio Code Security Feature Bypass Vulnerability

Summary

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Visual Studio Code	Affected: 1.0.0 , < 1.128.1 (custom)

Date Public

2026-07-14 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-45496",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-16T15:15:26.755092Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-16T15:15:34.745Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Visual Studio Code",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "1.128.1",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "1.128.1",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-07-14T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper limitation of a pathname to a restricted directory (\u0027path traversal\u0027) in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-03T22:53:03.830Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Visual Studio Code Security Feature Bypass Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45496"
        }
      ],
      "title": "Visual Studio Code Security Feature Bypass Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-45496",
    "datePublished": "2026-07-14T17:04:39.667Z",
    "dateReserved": "2026-05-12T16:07:22.618Z",
    "dateUpdated": "2026-08-03T22:53:03.830Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-45646 (GCVE-0-2026-45646)

Vulnerability from cvelistv5 – Published: 2026-07-14 17:05 – Updated: 2026-08-03 22:54

Title

OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability

Summary

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

2 products

Vendor	Product	Version
Microsoft	AspNet.OData	Affected: 7.0.0 , < 7.8.0 (custom)
Microsoft	AspNetCore.OData	Affected: 9.0.0 , < 9.5.0[SX1] (custom)

Date Public

2026-07-14 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-45646",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-14T18:12:04.850194Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-14T18:12:39.971Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "AspNet.OData",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "7.8.0",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "AspNetCore.OData",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "9.5.0[SX1]",
              "status": "affected",
              "version": "9.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:.Asp.Net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.8.0",
                  "versionStartIncluding": "7.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.Asp.NetCore:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "9.5.0[SX1]",
                  "versionStartIncluding": "9.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-07-14T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-03T22:54:10.859Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45646"
        }
      ],
      "title": "OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-45646",
    "datePublished": "2026-07-14T17:05:47.249Z",
    "dateReserved": "2026-05-12T20:33:35.156Z",
    "dateUpdated": "2026-08-03T22:54:10.859Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-47282 (GCVE-0-2026-47282)

Vulnerability from cvelistv5 – Published: 2026-07-14 17:04 – Updated: 2026-08-03 22:53

Title

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Summary

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-522 - Insufficiently Protected Credentials
CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Visual Studio Code	Affected: 1.0.0 , < 1.128.1 (custom)

Date Public

2026-07-14 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-47282",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-15T13:44:58.136470Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T13:45:13.537Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Visual Studio Code",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "1.128.1",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "1.128.1",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-07-14T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "CWE-522: Insufficiently Protected Credentials",
              "lang": "en-US",
              "type": "CWE"
            },
            {
              "cweId": "CWE-200",
              "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-03T22:53:03.193Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47282"
        }
      ],
      "title": "GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-47282",
    "datePublished": "2026-07-14T17:04:39.052Z",
    "dateReserved": "2026-05-18T23:53:33.896Z",
    "dateUpdated": "2026-08-03T22:53:03.193Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-47300 (GCVE-0-2026-47300)

Vulnerability from cvelistv5 – Published: 2026-07-14 18:20 – Updated: 2026-08-03 22:52

Title

ASP.NET Core Elevation of Privilege Vulnerability

Summary

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-303 - Incorrect Implementation of Authentication Algorithm

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

6 products

Vendor	Product	Version
Microsoft	.NET 10.0	Affected: 10.0.0 , < 10.0.10 (custom)
Microsoft	.NET 8.0	Affected: 8.0.0 , < 8.0.29 (custom)
Microsoft	.NET 9.0	Affected: 9.0.0 , < 9.0.18 (custom)
Microsoft	Microsoft Visual Studio 2022 version 17.12	Affected: 17.12.0 , < 17.12.22 (custom)
Microsoft	Microsoft Visual Studio 2022 version 17.14	Affected: 17.14.0 , < 17.14.36 (custom)
Microsoft	Microsoft Visual Studio 2026 version 18.7	Affected: 18.0 , < 18.7.4 (custom)

Date Public

2026-07-14 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-47300",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-15T03:57:39.408951Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T10:57:52.578Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": ".NET 10.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.10",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": ".NET 8.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "8.0.29",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": ".NET 9.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "9.0.18",
              "status": "affected",
              "version": "9.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2022 version 17.12",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.12.22",
              "status": "affected",
              "version": "17.12.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2022 version 17.14",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.14.36",
              "status": "affected",
              "version": "17.14.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2026 version 18.7",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.7.4",
              "status": "affected",
              "version": "18.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.10",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "8.0.29",
                  "versionStartIncluding": "8.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "9.0.18",
                  "versionStartIncluding": "9.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.12.22",
                  "versionStartIncluding": "17.12.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.14.36",
                  "versionStartIncluding": "17.14.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.7.4",
                  "versionStartIncluding": "18.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-07-14T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-303",
              "description": "CWE-303: Incorrect Implementation of Authentication Algorithm",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-03T22:52:50.586Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "ASP.NET Core Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300"
        }
      ],
      "title": "ASP.NET Core Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-47300",
    "datePublished": "2026-07-14T18:20:12.225Z",
    "dateReserved": "2026-05-18T23:53:33.897Z",
    "dateUpdated": "2026-08-03T22:52:50.586Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-47302 (GCVE-0-2026-47302)

Vulnerability from cvelistv5 – Published: 2026-07-14 18:45 – Updated: 2026-08-03 22:52

Title

.NET Denial of Service Vulnerability

Summary

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

12 products

Vendor	Product	Version
Microsoft	.NET 10.0	Affected: 10.0.0 , < 10.0.10 (custom)
Microsoft	.NET 8.0	Affected: 8.0.0 , < 8.0.29 (custom)
Microsoft	.NET 9.0	Affected: 9.0.0 , < 9.0.18 (custom)
Microsoft	Microsoft .NET Framework 3.5	Affected: 3.5.0 , < 2.0.50727.8983 & 3.0.30729.8978 (custom)
Microsoft	Microsoft .NET Framework 3.5 AND 4.7.2	Affected: 4.7.0 , < 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 (custom)
Microsoft	Microsoft .NET Framework 3.5 AND 4.8	Affected: 4.8.0 , < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 (custom)
Microsoft	Microsoft .NET Framework 3.5 AND 4.8.1	Affected: 4.8.1 , < 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 (custom)
Microsoft	Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2	Affected: 4.7.0 , < 4.7.4143.0 (custom)
Microsoft	Microsoft .NET Framework 4.8	Affected: 4.8.0 , < 4.8.4803.0 (custom)
Microsoft	Microsoft Visual Studio 2022 version 17.12	Affected: 17.12.0 , < 17.12.22 (custom)
Microsoft	Microsoft Visual Studio 2022 version 17.14	Affected: 17.14.0 , < 17.14.36 (custom)
Microsoft	Microsoft Visual Studio 2026 version 18.7	Affected: 18.0 , < 18.7.4 (custom)

Date Public

2026-07-14 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-47302",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-14T20:34:26.536141Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-14T20:48:10.245Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": ".NET 10.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.10",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": ".NET 8.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "8.0.29",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": ".NET 9.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "9.0.18",
              "status": "affected",
              "version": "9.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Windows Server 2012",
            "Windows Server 2012 (Server Core installation)",
            "Windows Server 2012 R2",
            "Windows Server 2012 R2 (Server Core installation)"
          ],
          "product": "Microsoft .NET Framework 3.5",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2.0.50727.8983 \u0026 3.0.30729.8978",
              "status": "affected",
              "version": "3.5.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Windows 10 Version 1607 for 32-bit Systems",
            "Windows 10 Version 1607 for x64-based Systems",
            "Windows 10 Version 1809 for 32-bit Systems",
            "Windows 10 Version 1809 for x64-based Systems",
            "Windows Server 2016",
            "Windows Server 2016 (Server Core installation)",
            "Windows Server 2019",
            "Windows Server 2019 (Server Core installation)"
          ],
          "product": "Microsoft .NET Framework 3.5 AND 4.7.2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
              "status": "affected",
              "version": "4.7.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Windows 10 Version 1809 for 32-bit Systems",
            "Windows 10 Version 1809 for x64-based Systems",
            "Windows 10 Version 21H2 for 32-bit Systems",
            "Windows 10 Version 21H2 for ARM64-based Systems",
            "Windows 10 Version 21H2 for x64-based Systems",
            "Windows 10 Version 22H2 for 32-bit Systems",
            "Windows 10 Version 22H2 for ARM64-based Systems",
            "Windows 10 Version 22H2 for x64-based Systems",
            "Windows Server 2019",
            "Windows Server 2019 (Server Core installation)",
            "Windows Server 2022",
            "Windows Server 2022 (Server Core installation)"
          ],
          "product": "Microsoft .NET Framework 3.5 AND 4.8",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.8.4803.0",
              "status": "affected",
              "version": "4.8.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Windows 10 Version 21H2 for 32-bit Systems",
            "Windows 10 Version 21H2 for ARM64-based Systems",
            "Windows 10 Version 21H2 for x64-based Systems",
            "Windows 10 Version 22H2 for 32-bit Systems",
            "Windows 10 Version 22H2 for ARM64-based Systems",
            "Windows 10 Version 22H2 for x64-based Systems",
            "Windows 11 Version 23H2 for ARM64-based Systems",
            "Windows 11 Version 23H2 for x64-based Systems",
            "Windows 11 Version 24H2 for ARM64-based Systems",
            "Windows 11 Version 24H2 for x64-based Systems",
            "Windows 11 Version 25H2 for ARM64-based Systems",
            "Windows 11 Version 25H2 for x64-based Systems",
            "Windows 11 Version 26H1 for ARM64-based Systems",
            "Windows 11 version 26H1 for x64-based Systems",
            "Windows Server 2022",
            "Windows Server 2022 (Server Core installation)"
          ],
          "product": "Microsoft .NET Framework 3.5 AND 4.8.1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9339.0",
              "status": "affected",
              "version": "4.8.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Windows Server 2012",
            "Windows Server 2012 (Server Core installation)",
            "Windows Server 2012 R2",
            "Windows Server 2012 R2 (Server Core installation)"
          ],
          "product": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "4.7.4143.0",
              "status": "affected",
              "version": "4.7.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Windows 10 Version 1607 for 32-bit Systems",
            "Windows 10 Version 1607 for x64-based Systems",
            "Windows Server 2012",
            "Windows Server 2012 (Server Core installation)",
            "Windows Server 2012 R2",
            "Windows Server 2012 R2 (Server Core installation)",
            "Windows Server 2016",
            "Windows Server 2016 (Server Core installation)"
          ],
          "product": "Microsoft .NET Framework 4.8",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "4.8.4803.0",
              "status": "affected",
              "version": "4.8.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2022 version 17.12",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.12.22",
              "status": "affected",
              "version": "17.12.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2022 version 17.14",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.14.36",
              "status": "affected",
              "version": "17.14.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2026 version 18.7",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.7.4",
              "status": "affected",
              "version": "18.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.10",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "8.0.29",
                  "versionStartIncluding": "8.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.8.4803.0",
                  "versionStartIncluding": "4.8.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.8.4803.0",
                  "versionStartIncluding": "4.8.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
                  "versionStartIncluding": "4.7.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.7.4143.0",
                  "versionStartIncluding": "4.7.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9339.0",
                  "versionStartIncluding": "4.8.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.0.50727.8983 \u0026 3.0.30729.8978",
                  "versionStartIncluding": "3.5.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.7.4",
                  "versionStartIncluding": "18.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.12.22",
                  "versionStartIncluding": "17.12.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "9.0.18",
                  "versionStartIncluding": "9.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.14.36",
                  "versionStartIncluding": "17.14.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-07-14T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-03T22:52:51.150Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": ".NET Denial of Service Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"
        }
      ],
      "title": ".NET Denial of Service Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-47302",
    "datePublished": "2026-07-14T18:45:32.796Z",
    "dateReserved": "2026-05-18T23:53:33.897Z",
    "dateUpdated": "2026-08-03T22:52:51.150Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-47303 (GCVE-0-2026-47303)

Vulnerability from cvelistv5 – Published: 2026-07-14 18:45 – Updated: 2026-08-03 22:52

Title

ASP.NET Core Elevation of Privilege Vulnerability

Summary

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-302 - Authentication Bypass by Assumed-Immutable Data
CWE-863 - Incorrect Authorization
CWE-90 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

6 products

Vendor	Product	Version
Microsoft	.NET 10.0	Affected: 10.0.0 , < 10.0.10 (custom)
Microsoft	.NET 8.0	Affected: 8.0.0 , < 8.0.29 (custom)
Microsoft	.NET 9.0	Affected: 9.0.0 , < 9.0.18 (custom)
Microsoft	Microsoft Visual Studio 2022 version 17.12	Affected: 17.12.0 , < 17.12.22 (custom)
Microsoft	Microsoft Visual Studio 2022 version 17.14	Affected: 17.14.0 , < 17.14.36 (custom)
Microsoft	Microsoft Visual Studio 2026 version 18.7	Affected: 18.0 , < 18.7.4 (custom)

Date Public

2026-07-14 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-47303",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-13T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T03:57:39.744Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": ".NET 10.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.10",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": ".NET 8.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "8.0.29",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": ".NET 9.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "9.0.18",
              "status": "affected",
              "version": "9.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2022 version 17.12",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.12.22",
              "status": "affected",
              "version": "17.12.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2022 version 17.14",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.14.36",
              "status": "affected",
              "version": "17.14.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2026 version 18.7",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.7.4",
              "status": "affected",
              "version": "18.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.10",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "8.0.29",
                  "versionStartIncluding": "8.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "9.0.18",
                  "versionStartIncluding": "9.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.12.22",
                  "versionStartIncluding": "17.12.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.14.36",
                  "versionStartIncluding": "17.14.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.7.4",
                  "versionStartIncluding": "18.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-07-14T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-302",
              "description": "CWE-302: Authentication Bypass by Assumed-Immutable Data",
              "lang": "en-US",
              "type": "CWE"
            },
            {
              "cweId": "CWE-863",
              "description": "CWE-863: Incorrect Authorization",
              "lang": "en-US",
              "type": "CWE"
            },
            {
              "cweId": "CWE-90",
              "description": "CWE-90: Improper Neutralization of Special Elements used in an LDAP Query (\u0027LDAP Injection\u0027)",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-03T22:52:51.774Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "ASP.NET Core Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303"
        }
      ],
      "title": "ASP.NET Core Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-47303",
    "datePublished": "2026-07-14T18:45:33.438Z",
    "dateReserved": "2026-05-18T23:53:33.898Z",
    "dateUpdated": "2026-08-03T22:52:51.774Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-47304 (GCVE-0-2026-47304)

Vulnerability from cvelistv5 – Published: 2026-07-14 18:45 – Updated: 2026-08-03 22:54

Title

.NET Security Feature Bypass Vulnerability

Summary

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-347 - Improper Verification of Cryptographic Signature
CWE-345 - Insufficient Verification of Data Authenticity

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

16 products

Vendor	Product	Version
Microsoft	.NET 10.0	Affected: 10.0.0 , < 10.0.10 (custom)
Microsoft	.NET 8.0	Affected: 8.0.0 , < 8.0.29 (custom)
Microsoft	.NET 9.0	Affected: 9.0.0 , < 9.0.18 (custom)
Microsoft	Microsoft .NET Framework 3.5	Affected: 3.5.0 , < 2.0.50727.8983 & 3.0.30729.8978 (custom)
Microsoft	Microsoft .NET Framework 3.5 AND 4.7.2	Affected: 4.7.0 , < 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 (custom)
Microsoft	Microsoft .NET Framework 3.5 AND 4.8	Affected: 4.8.0 , < 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 (custom)
Microsoft	Microsoft .NET Framework 3.5 AND 4.8.1	Affected: 4.8.1 , < 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 (custom)
Microsoft	Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2	Affected: 4.7.0 , < 4.7.4143.0 (custom)
Microsoft	Microsoft .NET Framework 4.8	Affected: 4.8.0 , < 4.8.4803.0 (custom)
Microsoft	Microsoft .NET Framework 4.8.1	Affected: 4.8.0.0 , < 4.8.9340.0 (custom)
Microsoft	Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)	Affected: -
Microsoft	Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	Affected: -
Microsoft	Microsoft Visual Studio 2022 version 17.12	Affected: 17.12.0 , < 17.12.22 (custom)
Microsoft	Microsoft Visual Studio 2022 version 17.14	Affected: 17.14.0 , < 17.14.36 (custom)
Microsoft	Microsoft Visual Studio 2026 version 18.5	Affected: -
Microsoft	Microsoft Visual Studio 2026 version 18.7	Affected: 18.0 , < 18.7.4 (custom)

Date Public

2026-07-14 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-47304",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-15T03:57:19.256900Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T11:00:31.257Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": ".NET 10.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.10",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": ".NET 8.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "8.0.29",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": ".NET 9.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "9.0.18",
              "status": "affected",
              "version": "9.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Windows 11 Version 26H1 for ARM64-based Systems",
            "Windows 11 version 26H1 for x64-based Systems",
            "Windows Server 2012",
            "Windows Server 2012 (Server Core installation)",
            "Windows Server 2012 R2",
            "Windows Server 2012 R2 (Server Core installation)"
          ],
          "product": "Microsoft .NET Framework 3.5",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2.0.50727.8983 \u0026 3.0.30729.8978",
              "status": "affected",
              "version": "3.5.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Windows 10 Version 1607 for 32-bit Systems",
            "Windows 10 Version 1607 for x64-based Systems",
            "Windows 10 Version 1809 for 32-bit Systems",
            "Windows 10 Version 1809 for x64-based Systems",
            "Windows Server 2016",
            "Windows Server 2016 (Server Core installation)",
            "Windows Server 2019",
            "Windows Server 2019 (Server Core installation)"
          ],
          "product": "Microsoft .NET Framework 3.5 AND 4.7.2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
              "status": "affected",
              "version": "4.7.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Windows 10 Version 1809 for 32-bit Systems",
            "Windows 10 Version 1809 for x64-based Systems",
            "Windows 10 Version 21H2 for 32-bit Systems",
            "Windows 10 Version 21H2 for ARM64-based Systems",
            "Windows 10 Version 21H2 for x64-based Systems",
            "Windows 10 Version 22H2 for 32-bit Systems",
            "Windows 10 Version 22H2 for ARM64-based Systems",
            "Windows 10 Version 22H2 for x64-based Systems",
            "Windows Server 2019",
            "Windows Server 2019 (Server Core installation)",
            "Windows Server 2022",
            "Windows Server 2022 (Server Core installation)"
          ],
          "product": "Microsoft .NET Framework 3.5 AND 4.8",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.8.4803.0",
              "status": "affected",
              "version": "4.8.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Windows 10 Version 21H2 for 32-bit Systems",
            "Windows 10 Version 21H2 for ARM64-based Systems",
            "Windows 10 Version 21H2 for x64-based Systems",
            "Windows 10 Version 22H2 for 32-bit Systems",
            "Windows 10 Version 22H2 for ARM64-based Systems",
            "Windows 10 Version 22H2 for x64-based Systems",
            "Windows 11 Version 23H2 for ARM64-based Systems",
            "Windows 11 Version 23H2 for x64-based Systems",
            "Windows 11 Version 24H2 for ARM64-based Systems",
            "Windows 11 Version 24H2 for x64-based Systems",
            "Windows 11 Version 25H2 for ARM64-based Systems",
            "Windows 11 Version 25H2 for x64-based Systems",
            "Windows Server 2022",
            "Windows Server 2022 (Server Core installation)",
            "Windows Server 2025",
            "Windows Server 2025 (Server Core installation)"
          ],
          "product": "Microsoft .NET Framework 3.5 AND 4.8.1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9339.0",
              "status": "affected",
              "version": "4.8.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Windows Server 2012",
            "Windows Server 2012 (Server Core installation)",
            "Windows Server 2012 R2",
            "Windows Server 2012 R2 (Server Core installation)"
          ],
          "product": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "4.7.4143.0",
              "status": "affected",
              "version": "4.7.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Windows 10 Version 1607 for 32-bit Systems",
            "Windows 10 Version 1607 for x64-based Systems",
            "Windows Server 2012",
            "Windows Server 2012 (Server Core installation)",
            "Windows Server 2012 R2",
            "Windows Server 2012 R2 (Server Core installation)",
            "Windows Server 2016",
            "Windows Server 2016 (Server Core installation)"
          ],
          "product": "Microsoft .NET Framework 4.8",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "4.8.4803.0",
              "status": "affected",
              "version": "4.8.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Windows 11 Version 26H1 for ARM64-based Systems",
            "Windows 11 version 26H1 for x64-based Systems"
          ],
          "product": "Microsoft .NET Framework 4.8.1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "4.8.9340.0",
              "status": "affected",
              "version": "4.8.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2022 version 17.12",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.12.22",
              "status": "affected",
              "version": "17.12.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2022 version 17.14",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.14.36",
              "status": "affected",
              "version": "17.14.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2026 version 18.5",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2026 version 18.7",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.7.4",
              "status": "affected",
              "version": "18.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.10",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "8.0.29",
                  "versionStartIncluding": "8.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "9.0.18",
                  "versionStartIncluding": "9.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.14.36",
                  "versionStartIncluding": "17.14.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.12.22",
                  "versionStartIncluding": "17.12.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.8.4803.0",
                  "versionStartIncluding": "4.8.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.8.4803.0",
                  "versionStartIncluding": "4.8.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.0.50727.9069 \u0026 3.0.30729.9067 \u0026 4.7.4143.0",
                  "versionStartIncluding": "4.7.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.7.4143.0",
                  "versionStartIncluding": "4.7.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.0.50727.9182 \u0026 3.0.30729.9168 \u0026 4.8.9339.0",
                  "versionStartIncluding": "4.8.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.0.50727.8983 \u0026 3.0.30729.8978",
                  "versionStartIncluding": "3.5.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.8.9340.0",
                  "versionStartIncluding": "4.8.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.7.4",
                  "versionStartIncluding": "18.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-07-14T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "CWE-347: Improper Verification of Cryptographic Signature",
              "lang": "en-US",
              "type": "CWE"
            },
            {
              "cweId": "CWE-345",
              "description": "CWE-345: Insufficient Verification of Data Authenticity",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-03T22:54:08.088Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": ".NET Security Feature Bypass Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304"
        }
      ],
      "title": ".NET Security Feature Bypass Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-47304",
    "datePublished": "2026-07-14T18:45:33.914Z",
    "dateReserved": "2026-05-18T23:53:33.898Z",
    "dateUpdated": "2026-08-03T22:54:08.088Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-47305 (GCVE-0-2026-47305)

Vulnerability from cvelistv5 – Published: 2026-07-14 18:45 – Updated: 2026-08-03 22:58

Title

Visual Studio Remote Code Execution Vulnerability

Summary

Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-693 - Protection Mechanism Failure

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

3 products

Vendor	Product	Version
Microsoft	Microsoft Visual Studio 2022 version 17.12	Affected: 17.12.0 , < 17.12.22 (custom)
Microsoft	Microsoft Visual Studio 2022 version 17.14	Affected: 17.14.0 , < 17.14.36 (custom)
Microsoft	Microsoft Visual Studio 2026 version 18.7	Affected: 18.0 , < 18.7.4 (custom)

Date Public

2026-07-14 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-47305",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-15T03:56:01.452587Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T11:15:19.881Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Microsoft Visual Studio 2022 version 17.12",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.12.22",
              "status": "affected",
              "version": "17.12.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2022 version 17.14",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.14.36",
              "status": "affected",
              "version": "17.14.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2026 version 18.7",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.7.4",
              "status": "affected",
              "version": "18.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.7.4",
                  "versionStartIncluding": "18.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.12.22",
                  "versionStartIncluding": "17.12.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.14.36",
                  "versionStartIncluding": "17.14.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-07-14T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-693",
              "description": "CWE-693: Protection Mechanism Failure",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-03T22:58:57.349Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Visual Studio Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47305"
        }
      ],
      "title": "Visual Studio Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-47305",
    "datePublished": "2026-07-14T18:45:34.402Z",
    "dateReserved": "2026-05-18T23:53:33.898Z",
    "dateUpdated": "2026-08-03T22:58:57.349Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-50506 (GCVE-0-2026-50506)

Vulnerability from cvelistv5 – Published: 2026-07-14 17:04 – Updated: 2026-08-03 22:53

Title

OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability

Summary

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

2 products

Vendor	Product	Version
Microsoft	AspNet.OData	Affected: 7.0.0 , < 7.8.0 (custom)
Microsoft	AspNetCore.OData	Affected: 9.0.0 , < 9.5.0[SX1] (custom)

Date Public

2026-07-14 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-50506",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-14T20:38:32.652460Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-14T20:48:12.727Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "AspNet.OData",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "7.8.0",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "AspNetCore.OData",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "9.5.0[SX1]",
              "status": "affected",
              "version": "9.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:.Asp.NetCore:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "9.5.0[SX1]",
                  "versionStartIncluding": "9.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.Asp.Net:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.8.0",
                  "versionStartIncluding": "7.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-07-14T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-03T22:53:02.660Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50506"
        }
      ],
      "title": "OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-50506",
    "datePublished": "2026-07-14T17:04:38.435Z",
    "dateReserved": "2026-06-04T19:00:41.292Z",
    "dateUpdated": "2026-08-03T22:53:02.660Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-50520 (GCVE-0-2026-50520)

Vulnerability from cvelistv5 – Published: 2026-07-14 17:05 – Updated: 2026-08-03 22:53

Title

Visual Studio Code Remote Code Execution Vulnerability

Summary

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.

Severity

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Visual Studio Code	Affected: 1.0.0 , < 1.128.1 (custom)

Date Public

2026-07-14 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-50520",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-10T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T03:56:00.270Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Visual Studio Code",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "1.128.1",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "1.128.1",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-07-14T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper neutralization of special elements used in a command (\u0027command injection\u0027) in Visual Studio Code allows an unauthorized attacker to execute code locally."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "CWE-77: Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-03T22:53:27.620Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Visual Studio Code Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50520"
        }
      ],
      "title": "Visual Studio Code Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-50520",
    "datePublished": "2026-07-14T17:05:07.225Z",
    "dateReserved": "2026-06-04T19:00:41.292Z",
    "dateUpdated": "2026-08-03T22:53:27.620Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

WID-SEC-W-2026-2324

CVE-2026-45496 (GCVE-0-2026-45496)

CVE-2026-45646 (GCVE-0-2026-45646)

CVE-2026-47282 (GCVE-0-2026-47282)

CVE-2026-47300 (GCVE-0-2026-47300)

CVE-2026-47302 (GCVE-0-2026-47302)

CVE-2026-47303 (GCVE-0-2026-47303)

CVE-2026-47304 (GCVE-0-2026-47304)

CVE-2026-47305 (GCVE-0-2026-47305)

CVE-2026-50506 (GCVE-0-2026-50506)

CVE-2026-50520 (GCVE-0-2026-50520)

Tags

Sightings

Nomenclature