CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 08:40 UTC )
What this means for you
This week: 5,436 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,436 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:visual_studio_2026 . Show all products
40 CVEs, showing 1 to 40
CVE Severity Title Published CVE-2026-32203 High 7.5 .NET and Visual Studio Denial of Service Vulnerability Assigned by microsoft
Apr 14, 2026 CVE-2026-32175 Medium 4.3 A tampering vulnerability exists when .NET Core improperly handles specially crafted files. May 12, 2026 CVE-2026-32177 High 7.3 Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. May 12, 2026 CVE-2026-45591 High 7.5 Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network. Jun 9, 2026 CVE-2026-47300 High 8.8 ASP.NET Core Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47302 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47303 High 8.8 ASP.NET Core Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47304 High 8.1 .NET Security Feature Bypass Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47305 High 7.8 Visual Studio Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50524 High 7.5 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50525 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50526 High 7.0 .NET Tampering Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50527 High 7.5 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50528 High 8.2 .NET Security Feature Bypass Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50646 High 7.8 .NET Framework Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50648 High 7.5 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50649 High 7.8 .NET Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50651 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50659 Medium 6.5 .NET Spoofing Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-62897 High 7.0 .NET Framework Remote Code Execution Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62899 Medium 5.9 .NET Security Feature Bypass Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62900 Medium 5.9 .NET Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62901 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62902 Medium 6.5 .NET Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62909 High 7.8 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62871 High 7.8 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62886 High 7.8 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-70354 High 7.8 .NET Core Remote Code Execution Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62898 High 7.5 Microsoft QUIC Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-77907 High 8.8 Visual Studio Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69439 High 8.8 .NET and Visual Studio Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69805 High 7.5 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-58649 Medium 6.5 .NET Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69304 Medium 5.9 ASP.NET Core Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-71328 High 8.8 .NET and Visual Studio Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77906 High 8.8 Visual Studio Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69806 High 7.0 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-85790 Medium 5.9 Microsoft QUIC Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88092 Critical 9.4 ASP.NET Core Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96957 High 8.8 .NET Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.