Back to vendor advisories
Microsoft Security Response CenterCVE-2026-118147

Visual Studio Spoofing Vulnerability

HighVendor CVSS 7.4 / 10 1 CVE Published Oct 30, 2026 at 7:00 AM UTC

Summary

Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

Products covered

  • Microsoft Visual Studio 2026 version 18.11

  • Microsoft Visual Studio 2017 version 15.9

  • Microsoft Visual Studio 2019 version 16.11

  • Microsoft Visual Studio 2022 version 17.14

Remediation

Release Notes

Vendor-listed fixes

  • 18.11.3

  • 15.9.84

  • 16.11.62

  • 17.14.44

CVEs in this advisory 1

Updates

  1. Published by Microsoft Security Response Center

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.