high7.4
CVE-2026-118147
Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.
Impact
Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Microsoft Visual Studio 2017 Version 15.9 | from 15.9.0 before 15.9.84 |
| Microsoft | Microsoft Visual Studio 2022 Version 17.14 | from 17.14.0 before 17.14.44 |
| Microsoft | Microsoft Visual Studio 2026 Version 18.11 | from 18.11.0 before 18.11.3 |
| Microsoft | Microsoft Visual Studio 2019 Version 16.11 | from 16.11.0 before 16.11.62 |