MicrosoftCVE-2026-47305

Microsoft Visual Studio: code execution

High7.8CVE-2026-47305 · Published Jul 14, 2026 · updated Jul 16, 2026

Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.

Microsoft advisory

Affected versions

Package	Affected	Fixed in
Microsoft Visual Studio 2022 version 17.12 Product	>= 17.12.0, < 17.12.22	17.12.22
Microsoft Visual Studio 2022 version 17.14 Product	>= 17.14.0, < 17.14.36	17.14.36
Microsoft Visual Studio 2026 version 18.7 Product	>= 18.0, < 18.7.4	18.7.4

Details and references

CVSS 3.1: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-693

More Microsoft advisories

Date	Advisory	Severity	Fixed in
Jul 14	Secret exfiltration vulnerability HighJul 14 CVE-2026-472821.128.1	High	1.128.1
Jul 14	Workspace Trust Security Feature Bypass Vulnerability HighJul 14 CVE-2026-571011.128.1	High	1.128.1
Jul 14	Remote Code Execution Vulnerability HighJul 14 CVE-2026-571021.128.1	High	1.128.1
Jul 14	Microsoft .NET 8.0: unsafe deserialization High7.8Jul 14 CVE-2026-506498.0.29+9 more	High7.8	8.0.29+9 more
Jul 14	Microsoft .NET 8.0: code injection High7.8Jul 14 CVE-2026-506508.0.29+10 more	High7.8	8.0.29+10 more
Jul 14	Microsoft .NET 10.0: resource exhaustion High7.5Jul 14 CVE-2026-5065110.0.10+5 more	High7.5	10.0.10+5 more

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.