CVE Catalog

CVE-2026-118147

HighCVSS 7.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.61%

49th percentile - higher than 49% of all known CVEs

Summary

CVE-2026-118147 is an improper certificate validation vulnerability in Visual Studio. An unauthorized attacker can exploit this flaw to perform spoofing over a network.

Risk Assessment

The organization may be exposed to spoofing of trusted network resources, potentially leading to data interception or unauthorized actions in the context of the Visual Studio user.

Recommendation

It is recommended to promptly install the latest Visual Studio update provided by the vendor that fixes the certificate validation flaw.

Other vulnerabilities in Visual Studio

See all
Original NVD description (English source)

Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS