CVE-2026-118147

Vendor

Microsoft

Product

Microsoft Visual Studio 2017 version 15.9, Microsoft Visual Studio 2019 version 16.11, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.11

CVSS v3.1

7.4 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness

CWE-295

Exposure class

Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 42
   CVE NVD 13h ago

   Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

   Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

   CVSS 7.4 CVE-2026-118147 Microsoft
2. 31
   Advisory MSRC 43h ago

   Visual Studio Spoofing Vulnerability

   Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

   CVE-2026-118147 Microsoft