Microsoft Visual Studio 2026 Version 18 12
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Microsoft Visual Studio 2026 Version 18 12.
By the Year
In 2026 there have been 19 vulnerabilities in Microsoft Visual Studio 2026 Version 18 12 with an average score of 7.7 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 19 | 7.74 |
It may take a day or so for new Microsoft Visual Studio 2026 Version 18 12 vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Visual Studio 2026 Version 18 12 Security Vulnerabilities
Nov 2026: ASP.NET Core Denial of Service Vulnerability
CVE-2026-118749
7.5 - High
- November 10, 2026
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Inefficient Algorithmic Complexity
Nov 2026: ASP.NET Core Denial of Service Vulnerability
CVE-2026-118748
7.5 - High
- November 10, 2026
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Allocation of Resources Without Limits or Throttling
Nov 2026: Visual Studio Remote Code Execution Vulnerability
CVE-2026-118745
8.8 - High
- November 10, 2026
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Heap-based Buffer Overflow
Nov 2026: Visual Studio Remote Code Execution Vulnerability
CVE-2026-114159
8.8 - High
- November 10, 2026
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Heap-based Buffer Overflow
Nov 2026: Visual Studio Remote Code Execution Vulnerability
CVE-2026-114158
8.8 - High
- November 10, 2026
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Heap-based Buffer Overflow
Nov 2026: ASP.NET Core Security Feature Bypass Vulnerability
CVE-2026-114156
6.5 - Medium
- November 10, 2026
Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Improper Resolution of Path Equivalence
Nov 2026: ASP.NET Core Security Feature Bypass Vulnerability
CVE-2026-114157
7.5 - High
- November 10, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges locally.
Race Condition
Nov 2026: ASP.NET Core Denial of Service Vulnerability
CVE-2026-114154
7.5 - High
- November 10, 2026
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Memory Leak
Nov 2026: Visual Studio Remote Code Execution Vulnerability
CVE-2026-114151
8.8 - High
- November 10, 2026
Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network.
Marshaling, Unmarshaling
Nov 2026: Visual Studio Remote Code Execution Vulnerability
CVE-2026-114152
8.8 - High
- November 10, 2026
Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Stack Overflow
Nov 2026: ASP.NET Core Denial of Service Vulnerability
CVE-2026-114149
7.5 - High
- November 10, 2026
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Allocation of Resources Without Limits or Throttling
Nov 2026: ASP.NET Core Information Disclosure Vulnerability
CVE-2026-114150
5.9 - Medium
- November 10, 2026
Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network.
Use of Uninitialized Resource
Nov 2026: ASP.NET Core Elevation of Privilege Vulnerability
CVE-2026-114146
9 - Critical
- November 10, 2026
Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
AuthZ
Nov 2026: ASP.NET Core Denial of Service Vulnerability
CVE-2026-114147
7.5 - High
- November 10, 2026
Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Memory Leak
Nov 2026: ASP.NET Core Elevation of Privilege Vulnerability
CVE-2026-109481
7.5 - High
- November 10, 2026
Cross-site request forgery (csrf) in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Session Riding
Nov 2026: ASP.NET Core Denial of Service Vulnerability
CVE-2026-109478
7.5 - High
- November 10, 2026
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Inefficient Algorithmic Complexity
Nov 2026: ASP.NET Core Information Disclosure Vulnerability
CVE-2026-109476
6.1 - Medium
- November 10, 2026
Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network.
Output Sanitization
Nov 2026: .NET Elevation of Privilege Vulnerability
CVE-2026-105544
7.5 - High
- November 10, 2026
Improper access control in .NET allows an authorized attacker to elevate privileges locally.
External Control of System or Configuration Setting
Oct 2026: .NET and Visual Studio Remote Code Execution Vulnerability
CVE-2026-70197
8.1 - High
- October 13, 2026
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Memory Corruption
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Visual Studio 2026 Version 18 12 or by Microsoft? Click the Watch button to subscribe.
