CVE-2026-47305
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
A protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally. The vulnerability can be exploited through local access to the system.
Risk Assessment
The risk involves potential privilege escalation or malicious code execution by an attacker with local access, which could lead to system compromise or data theft.
Recommendation
Immediately update Visual Studio to the latest version containing the security fix. Also restrict local access to systems where Visual Studio is installed.
Other vulnerabilities in Visual Studio
See all- CVE-2021-36952High
Visual Studio Remote Code Execution Vulnerability. Details not available in the description.
- CVE-2024-30052Medium
A remote code execution vulnerability in Visual Studio allows an attacker to execute arbitrary code in the context of the logged-in user. Exploitation requires user interaction, such as opening a specially crafted project file.
- CVE-2024-29060Medium
Elevation of privilege vulnerability in Visual Studio. An attacker could exploit this flaw to gain elevated privileges on the system.
- CVE-2023-33139Medium
A vulnerability in Visual Studio allows for information disclosure, potentially leading to unauthorized access to sensitive data.
- CVE-2023-23381High
Visual Studio contains a Remote Code Execution Vulnerability that could allow an attacker to execute arbitrary code in the context of the logged-in user.
- CVE-2023-21815High
Remote code execution vulnerability in Visual Studio. An attacker could exploit this flaw to execute arbitrary code in the user's context.
- CVE-2023-21567Medium
Denial of Service vulnerability in Visual Studio.
- CVE-2023-21566High
Elevation of privilege vulnerability in Visual Studio. Could be exploited to gain elevated privileges in the development environment.
- CVE-2022-41119High
A remote code execution vulnerability in Visual Studio allows an attacker to execute arbitrary code in the user's context.
- CVE-2021-42319Medium
An elevation of privilege vulnerability in Visual Studio. Technical details are not provided in the description.
Original NVD description (English source)
Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.