CVE-2026-114151

Vendor

Microsoft

Product

.NET 10.0 installed on Windows, .NET 11.0 installed on Windows, .NET 8.0 installed on Windows, .NET 9.0 installed on Windows

CVSS v3.1

8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness

CWE-121, CWE-502

Exposure class

Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   Advisory MSRC 2h ago

   Visual Studio Remote Code Execution Vulnerability

   Updated the products listed in the Security Updates table. This is an informational change only.

   CVE-2026-114151 Microsoft
2. 39
   CVE NVD 23h ago

   Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network.

   Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network.

   CVSS 8.8 CVE-2026-114151 Microsoft