CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 07:30 UTC )
What this means for you
This week: 5,443 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,443 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:visual_studio_2026 . Show all products
40 CVEs, showing 1 to 40
CVE Severity Title Published CVE-2026-96957 High 8.8 .NET Security Feature Bypass Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-88092 Critical 9.4 ASP.NET Core Tampering Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-85790 Medium 5.9 Microsoft QUIC Information Disclosure Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-69806 High 7.0 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77906 High 8.8 Visual Studio Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-71328 High 8.8 .NET and Visual Studio Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69304 Medium 5.9 ASP.NET Core Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-58649 Medium 6.5 .NET Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69805 High 7.5 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69439 High 8.8 .NET and Visual Studio Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-77907 High 8.8 Visual Studio Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-62898 High 7.5 Microsoft QUIC Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-70354 High 7.8 .NET Core Remote Code Execution Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62886 High 7.8 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62871 High 7.8 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62909 High 7.8 .NET Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62902 Medium 6.5 .NET Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62901 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62900 Medium 5.9 .NET Information Disclosure Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62899 Medium 5.9 .NET Security Feature Bypass Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62897 High 7.0 .NET Framework Remote Code Execution Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-50659 Medium 6.5 .NET Spoofing Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50651 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50649 High 7.8 .NET Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50648 High 7.5 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50646 High 7.8 .NET Framework Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50528 High 8.2 .NET Security Feature Bypass Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50527 High 7.5 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50526 High 7.0 .NET Tampering Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50525 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-50524 High 7.5 .NET Framework Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47305 High 7.8 Visual Studio Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47304 High 8.1 .NET Security Feature Bypass Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47303 High 8.8 ASP.NET Core Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47302 High 7.5 .NET Denial of Service Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-47300 High 8.8 ASP.NET Core Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-45591 High 7.5 Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network. Jun 9, 2026 CVE-2026-32177 High 7.3 Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. May 12, 2026 CVE-2026-32175 Medium 4.3 A tampering vulnerability exists when .NET Core improperly handles specially crafted files. May 12, 2026 CVE-2026-32203 High 7.5 .NET and Visual Studio Denial of Service Vulnerability Assigned by microsoft
Apr 14, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.