8.8
High
CVE-2026-103572 Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server…
Description
Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Visual Studio 2022 version 17.14 17.14 | 17.14.0 → < 17.14.42 | 17.14.42 |
| Microsoft Visual Studio 2026 version 18.10 18.10 | 18.10.0 → < 18.10.4 | 18.10.4 |
Other CVEs of Microsoft Visual Studio 2022 version 17.14
The 92 CVEs of Microsoft Visual Studio 2022 version 17.14 →
CVE-2026-118147
Visual Studio Spoofing Vulnerability
7.4
High
CVE-2026-109468
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service…
7.5
High
CVE-2026-105016
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network
9.8
Critical
CVE-2026-70162
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests
5.9
Medium