Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-81376 | 9.6 critical | 1.0% | microsoft, visual studio code | Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 6 h ago |
| CVE-2026-65669 | 9.6 critical | 1.0% | microsoft, sql server management studio 22 | Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network. | 6 h ago |
| CVE-2026-77906 | 8.8 high | 1.0% | microsoft, microsoft visual studio 2026 version 18.9 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 6 h ago |
| CVE-2026-78462 | 8.8 high | 1.0% | microsoft, visual studio code | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 6 h ago |
| CVE-2026-71328 | 8.8 high | 1.0% | microsoft, .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 6 h ago |
| CVE-2026-69439 | 8.8 high | 1.0% | microsoft, .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime | Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. | 6 h ago |
| CVE-2026-77907 | 8.8 high | 1.0% | microsoft, microsoft visual studio 2026 version 18.9 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 6 h ago |
| CVE-2026-81379 | 8.2 high | 1.0% | microsoft, visual studio code | Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 6 h ago |
| CVE-2026-81378 | 8.2 high | 1.0% | microsoft, visual studio code | Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 6 h ago |
| CVE-2026-81357 | 8.2 high | 1.0% | microsoft, visual studio code | Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 6 h ago |
| CVE-2026-81356 | 8.2 high | 1.0% | microsoft, visual studio code | Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 6 h ago |
| CVE-2026-81383 | 7.4 high | 1.0% | microsoft, visual studio code | Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network. | 6 h ago |
| CVE-2026-78461 | 7.4 high | 1.0% | microsoft, visual studio code | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 6 h ago |
| CVE-2026-69806 | 7.0 high | 1.0% | microsoft, .net 10.0 runtime, .net 11.0 runtime, .net 9.0 runtime | Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally. | 6 h ago |
| CVE-2026-81381 | 6.5 medium | 1.0% | microsoft, visual studio code | Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. | 6 h ago |
| CVE-2026-81377 | 6.5 medium | 1.0% | microsoft, visual studio code | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network. | 6 h ago |
| CVE-2026-69304 | 5.9 medium | 1.0% | microsoft, .net 10.0 runtime, .net 8.0 runtime, .net 9.0 runtime | Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 6 h ago |
| CVE-2026-81380 | 5.3 medium | 1.0% | microsoft, visual studio code | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. | 6 h ago |
| CVE-2026-80098 | 9.3 critical | 0.00% | microsoft, microsoft copilot studio | Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network. | 6 h ago |
| CVE-2026-70334 | 7.8 high | 0.00% | microsoft, visual studio code | Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 6 h ago |
| CVE-2026-69805 | 7.5 high | 0.00% | microsoft, microsoft visual studio 2022 version 17.14, microsoft visual studio 2026 version 18.9, microsoft.diagnostics.runtime | External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network. | 6 h ago |
| CVE-2026-118147 | 7.4 high | — | microsoft, microsoft visual studio 2017 version 15.9, microsoft visual studio 2019 version 16.11, microsoft visual studio 2022 version 17.14 | Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network. | 4 h ago |
| CVE-2026-62848 | 7.3 high | — | metalama | Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023.0.101-rc until 2025.1.18, 2026.0.25 and 2026.1.19, the Windows Visual Studio integration deserializes local named-pipe messages without restricting which CLR types can be instantiated. The pipe connects `devenv`, the out-of-process Roslyn code-analysis process and the `CodeLens` process, and has the predictable name `Metalama_{role}_{processId}_{hash(PackageVersion)}`. Releases from the first public 2023.0 line through 2026.0.x use Newtonsoft.Json with `TypeNameHandling.All`; the later `SerializationBinder` only remaps assembly names, and `BindToType` resolves arbitrary wire-supplied types without an allow-list. Releases 2026.1.0 through 2026.1.18 use typeless MessagePack with `TypelessObjectResolver` and likewise instantiate arbitrary types. A same-user local process able to write to the pipe can send crafted messages that lead to arbitrary code execution with confidentiality, integrity and availability impacts inside the affected Visual Studio process. Default Windows pipe ACLs limit writers to the same logged-in user, so this does not escalate privileges or cross a security boundary; command-line and MSBuild-only builds do not use the channel. The maintained Metalama + PostSharp extension is affected from 2024.1 through 2026.1.4, while earlier Metalama-free PostSharp versions are unaffected. The retired Metalama and Caravela extensions remain affected and require removal or migration. The framework issue is fixed in versions 2025.1.18, 2026.0.25 and 2026.1.19; the maintained Metalama + PostSharp Visual Studio extension is fixed in version 2026.1.5. The retired Metalama and Caravela extensions require removal or migration. | Fri 30 Oct |
| CVE-2026-58649 | 6.5 medium | 0.00% | microsoft, .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime | Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. | 6 h ago |
24 of 24
Download these 24 as CSV · subscribe to this list.
EPSS scores: 2026-10-30. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.