Veille CVE

Semaine du 12 octobre au 18 octobre 2026

23 CVE

Critique 2 Élevée 19 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft Visual Studio Code » ✕
  1. CVE-2026-70098 8.8 Élevée

    Microsoft Visual Studio Code

    Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  2. CVE-2026-102238 9.6 Critique

    Microsoft Visual Studio Code

    Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  3. CVE-2026-102235 8.8 Élevée

    Microsoft Visual Studio Code

    Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  4. CVE-2026-102234 7.4 Élevée

    Microsoft Visual Studio Code

    Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  5. CVE-2026-96237 7.5 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime · Microsoft Visual Studio 2022 version 17.14

    Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

  6. CVE-2026-96235 8.8 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

  7. CVE-2026-96230 8.8 Élevée

    Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.10 · Microsoft.AspNetCore.Components.WebAssembly.Server

    Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

  8. CVE-2026-96224 8.8 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

  9. CVE-2026-87697 8.8 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

  10. CVE-2026-83520 8.8 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

  11. CVE-2026-70197 8.1 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

  12. CVE-2026-70174 8.8 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.

  13. CVE-2026-70035 8.8 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

  14. CVE-2026-70007 8.8 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

  15. CVE-2026-69370 8.8 Élevée

    Microsoft Visual Studio Code

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  16. CVE-2026-105016 9.8 Critique

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

  17. CVE-2026-103572 8.8 Élevée

    Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.10

    Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.

  18. CVE-2026-102870 8.8 Élevée

    Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.10 · Microsoft.AspNetCore.Components.WebAssembly.Server

    Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

  19. CVE-2026-102851 6.1 Moyenne

    Microsoft Visual Studio Code

    Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.

  20. CVE-2026-102233 7.8 Élevée

    Microsoft Visual Studio Code

    Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  21. CVE-2026-102232 7.0 Élevée

    Microsoft Visual Studio Code

    Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  22. CVE-2026-102231 7.7 Élevée

    Microsoft Visual Studio Code

    Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  23. CVE-2026-102229 6.8 Moyenne

    Microsoft Visual Studio Code

    Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.