Microsoft DeveloperTools: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 25

• High 8.8
  CVE-2026-47300

  ASP.NET Core Elevation of Privilege Vulnerability

  Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 8.0 runtime Ubuntu Alpine NuGet
  Jul 14, 2026
• High 8.8
  CVE-2026-47303

  ASP.NET Core Elevation of Privilege Vulnerability

  Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 10.0 runtime Ubuntu Alpine NuGet
  Jul 14, 2026
• High 8.8
  CVE-2026-57102

  Visual Studio Code Security Feature Bypass Vulnerability

  Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  Microsoft Visual Studio Code
  Jul 14, 2026
• High 8.4
  CVE-2026-50520

  Visual Studio Code Remote Code Execution Vulnerability

  Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.

  Microsoft Visual Studio Code
  Jul 14, 2026
• High 8.2
  CVE-2026-50528

  .NET Security Feature Bypass Vulnerability

  Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 10.0 runtime Ubuntu Alpine Wolfi NuGet
  Jul 14, 2026
• High 8.1
  CVE-2026-47304

  .NET Security Feature Bypass Vulnerability

  Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine Wolfi NuGet
  Jul 14, 2026
• High 7.8
  CVE-2026-47305

  Visual Studio Remote Code Execution Vulnerability

  Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft Visual Studio 2022 version 17.12 Microsoft Visual Studio 2026 version 18.7
  Jul 14, 2026
• High 7.8
  CVE-2026-50646

  .NET Framework Remote Code Execution Vulnerability

  Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine NuGet
  Jul 14, 2026
• High 7.8
  CVE-2026-50649

  .NET Remote Code Execution Vulnerability

  Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2 Ubuntu Alpine
  Jul 14, 2026
• High 7.8
  CVE-2026-50650

  .NET Framework Elevation of Privilege Vulnerability

  Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine NuGet
  Jul 14, 2026
• High 7.5
  CVE-2026-45646

  OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability

  Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  Microsoft AspNetCore.OData AspNet.OData
  Jul 14, 2026
• High 7.5
  CVE-2026-47302

  .NET Denial of Service Vulnerability

  Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine Wolfi NuGet
  Jul 14, 2026
• High 7.5
  CVE-2026-50506

  OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability

  Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  Microsoft AspNetCore.OData AspNet.OData
  Jul 14, 2026
• High 7.5
  CVE-2026-50524

  .NET Framework Denial of Service Vulnerability

  Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 10.0 runtime Ubuntu Alpine Wolfi NuGet
  Jul 14, 2026
• High 7.5
  CVE-2026-50525

  .NET Denial of Service Vulnerability

  Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine Wolfi NuGet
  Jul 14, 2026
• High 7.5
  CVE-2026-50527

  .NET Framework Denial of Service Vulnerability

  Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Ubuntu Alpine Wolfi NuGet
  Jul 14, 2026
• High 7.5
  CVE-2026-50648

  .NET Framework Denial of Service Vulnerability

  Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine Wolfi NuGet
  Jul 14, 2026
• High 7.5
  CVE-2026-50651

  .NET Denial of Service Vulnerability

  Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 8.0 runtime Ubuntu Alpine Wolfi NuGet
  Jul 14, 2026
• High 7.5
  CVE-2026-56170

  ASP.NET Core Denial of Service Vulnerability

  Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  Microsoft .NET 9.0 runtime .NET 10.0 runtime .NET 8.0 runtime Ubuntu NuGet
  Jul 14, 2026
• High 7.5
  CVE-2026-57108

  .NET Denial of Service Vulnerability

  Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.

  Microsoft .NET 9.0 runtime .NET 10.0 runtime .NET 8.0 runtime Ubuntu Alpine Wolfi NuGet
  Jul 14, 2026
• High 7.1
  CVE-2026-57101

  Visual Studio Code Security Feature Bypass Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  Microsoft Visual Studio Code
  Jul 14, 2026
• High 7.0
  CVE-2026-50526

  .NET Tampering Vulnerability

  Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.

  Microsoft Microsoft Visual Studio 2022 version 17.14 .NET 9.0 runtime .NET 8.0 runtime Ubuntu Alpine NuGet
  Jul 14, 2026
• Medium 6.5
  CVE-2026-47282

  GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

  Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  Microsoft Visual Studio Code
  Jul 14, 2026
• Medium 6.5
  CVE-2026-50659

  .NET Spoofing Vulnerability

  Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine Wolfi NuGet
  Jul 14, 2026
• Medium 5.5
  CVE-2026-45496

  Visual Studio Code Security Feature Bypass Vulnerability

  Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  Microsoft Visual Studio Code
  Jul 14, 2026

Revision history

1. 2026-08-23 #7

   Neue Updates von Red Hat aufgenommen

2. 2026-07-22 #6

   Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen

3. 2026-07-21 #5

   Neue Updates von Fedora und Oracle Linux aufgenommen

4. 2026-07-20 #4

   Neue Updates von Oracle Linux und Red Hat aufgenommen

5. 2026-07-16 #3

   Neue Updates von Fedora aufgenommen

6. 2026-07-15 #2

   Neue Updates von Ubuntu, Red Hat und Fedora aufgenommen

7. 2026-07-14 #1

   Initiale Fassung

References

• Microsoft Leitfaden für Sicherheitsupdates
  https://msrc.microsoft.com/update-guide/
• Microsoft Security Advisory CVE-2026-47282
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47282
• Microsoft Security Advisory CVE-2026-45496
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45496
• Microsoft Security Advisory CVE-2026-57102
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57102
• Microsoft Security Advisory CVE-2026-57101
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57101
• Microsoft Security Advisory CVE-2026-50520
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50520
• Microsoft Security Advisory CVE-2026-41109
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41109
• Microsoft Security Advisory CVE-2026-50648
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648
• Microsoft Security Advisory CVE-2026-50646
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646
• Microsoft Security Advisory CVE-2026-50650
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650
• Microsoft Security Advisory CVE-2026-50527
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527
• Microsoft Security Advisory CVE-2026-47302
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302
• Microsoft Security Advisory CVE-2026-56170
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170
• Microsoft Security Advisory CVE-2026-50524
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524
• Microsoft Security Advisory CVE-2026-50528
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528
• Microsoft Security Advisory CVE-2026-47300
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300
• Microsoft Security Advisory CVE-2026-47303
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303
• Microsoft Security Advisory CVE-2026-50525
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525
• Microsoft Security Advisory CVE-2026-50526
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526
• Microsoft Security Advisory CVE-2026-57108
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108
• Microsoft Security Advisory CVE-2026-50649
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649
• Microsoft Security Advisory CVE-2026-50659
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659
• Microsoft Security Advisory CVE-2026-50651
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50651
• Microsoft Security Advisory CVE-2026-47305
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47305
• Microsoft Security Advisory CVE-2026-47304
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304
• Microsoft Security Advisory CVE-2026-50506
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50506
• Microsoft Security Advisory CVE-2026-45646
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45646
• Ubuntu Security Notice USN-8553-1 vom 2026-07-16
  https://ubuntu.com/security/notices/USN-8553-1
• Red Hat Security Advisory RHSA-2026:39952 vom 2026-07-16
  https://access.redhat.com/errata/RHSA-2026:39952
• Fedora Security Advisory FEDORA-2026-D6B061AD69 vom 2026-07-16
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-d6b061ad69
• Fedora Security Advisory FEDORA-2026-3AFD9D89F4 vom 2026-07-16
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-3afd9d89f4
• Fedora Security Advisory FEDORA-2026-F738966FC9 vom 2026-07-16
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-f738966fc9
• Fedora Security Advisory FEDORA-2026-D9817786D6 vom 2026-07-16
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-d9817786d6
• Oracle Linux Security Advisory ELSA-2026-41895 vom 2026-07-20
  https://linux.oracle.com/errata/ELSA-2026-41895.html
• Oracle Linux Security Advisory ELSA-2026-41896 vom 2026-07-20
  https://linux.oracle.com/errata/ELSA-2026-41896.html
• Oracle Linux Security Advisory ELSA-2026-41897 vom 2026-07-20
  https://linux.oracle.com/errata/ELSA-2026-41897.html
• Oracle Linux Security Advisory ELSA-2026-41898 vom 2026-07-20
  https://linux.oracle.com/errata/ELSA-2026-41898.html
• Oracle Linux Security Advisory ELSA-2026-41899 vom 2026-07-21
  https://linux.oracle.com/errata/ELSA-2026-41899.html
• Red Hat Security Advisory RHSA-2026:42145 vom 2026-07-20
  https://access.redhat.com/errata/RHSA-2026:42145
• Fedora Security Advisory FEDORA-2026-DA44C3870F vom 2026-07-21
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-da44c3870f
• Oracle Linux Security Advisory ELSA-2026-41901 vom 2026-07-21
  https://linux.oracle.com/errata/ELSA-2026-41901.html
• Oracle Linux Security Advisory ELSA-2026-41900 vom 2026-07-21
  https://linux.oracle.com/errata/ELSA-2026-41900.html
• Fedora Security Advisory FEDORA-2026-9AEF53FA96 vom 2026-07-21
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-9aef53fa96
• Oracle Linux Security Advisory ELSA-2026-41894 vom 2026-07-21
  https://linux.oracle.com/errata/ELSA-2026-41894.html
• Oracle Linux Security Advisory ELSA-2026-41893 vom 2026-07-21
  https://linux.oracle.com/errata/ELSA-2026-41893.html
• Rocky Linux Security Advisory RLSA-2026:41901 vom 2026-07-23
  https://errata.build.resf.org/RLSA-2026:41901
• Rocky Linux Security Advisory RLSA-2026:41900 vom 2026-07-23
  https://errata.build.resf.org/RLSA-2026:41900
• Rocky Linux Security Advisory RLSA-2026:41899 vom 2026-07-23
  https://errata.build.resf.org/RLSA-2026:41899
• Rocky Linux Security Advisory RLSA-2026:41898 vom 2026-07-23
  https://errata.build.resf.org/RLSA-2026:41898
• Rocky Linux Security Advisory RLSA-2026:41897 vom 2026-07-23
  https://errata.build.resf.org/RLSA-2026:41897
• Rocky Linux Security Advisory RLSA-2026:41896 vom 2026-07-23
  https://errata.build.resf.org/RLSA-2026:41896
• Rocky Linux Security Advisory RLSA-2026:41895 vom 2026-07-23
  https://errata.build.resf.org/RLSA-2026:41895
• Rocky Linux Security Advisory RLSA-2026:41894 vom 2026-07-23
  https://errata.build.resf.org/RLSA-2026:41894
• Rocky Linux Security Advisory RLSA-2026:41893 vom 2026-07-23
  https://errata.build.resf.org/RLSA-2026:41893
• Red Hat Security Advisory RHSA-2026:41901 vom 2026-07-23
  https://access.redhat.com/errata/RHSA-2026:41901
• Red Hat Security Advisory RHSA-2026:41900 vom 2026-07-23
  https://access.redhat.com/errata/RHSA-2026:41900
• Red Hat Security Advisory RHSA-2026:41893 vom 2026-07-23
  https://access.redhat.com/errata/RHSA-2026:41893
• Red Hat Security Advisory RHSA-2026:41894 vom 2026-07-23
  https://access.redhat.com/errata/RHSA-2026:41894
• Red Hat Security Advisory RHSA-2026:41895 vom 2026-07-23
  https://access.redhat.com/errata/RHSA-2026:41895
• Red Hat Security Advisory RHSA-2026:41896 vom 2026-07-23
  https://access.redhat.com/errata/RHSA-2026:41896
• Red Hat Security Advisory RHSA-2026:41897 vom 2026-07-23
  https://access.redhat.com/errata/RHSA-2026:41897
• Red Hat Security Advisory RHSA-2026:41898 vom 2026-07-23
  https://access.redhat.com/errata/RHSA-2026:41898
• Red Hat Security Advisory RHSA-2026:41899 vom 2026-07-23
  https://access.redhat.com/errata/RHSA-2026:41899
• Red Hat Security Advisory RHSA-2026:58566 vom 2026-08-24
  https://access.redhat.com/errata/RHSA-2026:58566
• Red Hat Security Advisory RHSA-2026:58567 vom 2026-08-24
  https://access.redhat.com/errata/RHSA-2026:58567
• Red Hat Security Advisory RHSA-2026:58570 vom 2026-08-24
  https://access.redhat.com/errata/RHSA-2026:58570
• Red Hat Security Advisory RHSA-2026:58568 vom 2026-08-24
  https://access.redhat.com/errata/RHSA-2026:58568
• Red Hat Security Advisory RHSA-2026:58569 vom 2026-08-24
  https://access.redhat.com/errata/RHSA-2026:58569