visual_studio_2026_version_18.9 vulnerabilities
CVEs whose affected-version data names the visual_studio_2026_version_18.9 package (nuget). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-69806High· 7.0Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
▾ TwilightMicrosoft · .NET 10.0EPSS 0.82%via NVD
CVE-2026-69522High· 8.8Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
▾ TwilightMicrosoft · .NET 10.0EPSS 0.84%via NVD
CVE-2026-69439High· 8.8Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
▾ TwilightMicrosoft · .NET 10.0EPSS 0.82%via NVD