CVE-2026-118147

Visual Studio Spoofing Vulnerability

CVSS 3.1 7.4 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 31 Oct 2026 20:04:47 UTC. Read the latest advisory.

cve-program · CVE-2026-118147

Published

Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-118147

Published

Microsoft Visual Studio 2017 version 15.9

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Microsoft",
                    "product": "Microsoft Visual Studio 2017 version 15.9",
                    "versions": [
                        {
                            "version": "15.9.0",
                            "lessThan": "15.9.84",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Microsoft Visual Studio 2019 version 16.11

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Microsoft",
                    "product": "Microsoft Visual Studio 2019 version 16.11",
                    "versions": [
                        {
                            "version": "16.11.0",
                            "lessThan": "16.11.62",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Microsoft Visual Studio 2022 version 17.14

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Microsoft",
                    "product": "Microsoft Visual Studio 2022 version 17.14",
                    "versions": [
                        {
                            "version": "17.14.0",
                            "lessThan": "17.14.44",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Microsoft Visual Studio 2026 version 18.11

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Microsoft",
                    "product": "Microsoft Visual Studio 2026 version 18.11",
                    "versions": [
                        {
                            "version": "18.11.0",
                            "lessThan": "18.11.3",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON