Nov 2026: Visual Studio Remote Code Execution Vulnerability
CVE-2026-114158 Published on November 10, 2026

Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL

Weakness Type

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().


Products Associated with CVE-2026-114158

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Affected Versions

Microsoft .NET 10.0 installed on Windows: Microsoft .NET 11.0 installed on Windows: Microsoft .NET 8.0 installed on Windows: Microsoft .NET 9.0 installed on Windows: Microsoft Visual Studio 2026 version 18.11: Microsoft Visual Studio 2026 version 18.12:

Exploit Probability

EPSS
0.87%
Percentile
59.22%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.