[NEW] [high] Microsoft DeveloperTools: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Microsoft Visual Studio Code, .NET Framework, Microsoft .NET, Visual Studio 2022, and Visual Studio 2026 to gain elevated permissions, including administrative rights, execute arbitrary code, bypass security measures, manipulate or disclose data, trigger a Denial-of-Service state, or conduct spoofing attacks.
CSIRTS triage
- What
- Multiple vulnerabilities in Microsoft Developer Tools can be exploited to gain elevated permissions and execute arbitrary code.
- Who is affected
- Users of Microsoft Visual Studio Code, .NET Framework, and Visual Studio are affected.
- Urgency
- Remediation is high priority due to the potential for significant impact.
- Action
- Update to the latest versions of Microsoft Developer Tools.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch DeveloperTools
Get an email when a new DeveloperTools advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2324
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-472820.61% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 46% of all scored CVEs.
- Low exploitation riskCVE-2026-454960.36% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 28% of all scored CVEs.
- Low exploitation riskCVE-2026-571020.77% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 52% of all scored CVEs.
- Low exploitation riskCVE-2026-571010.44% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 36% of all scored CVEs.
- Low exploitation riskCVE-2026-505200.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 17% of all scored CVEs.
- Low exploitation riskCVE-2026-411090.86% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 55% of all scored CVEs.
- Low exploitation riskCVE-2026-506480.84% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 54% of all scored CVEs.
- Low exploitation riskCVE-2026-506460.95% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 58% of all scored CVEs.
- Low exploitation riskCVE-2026-506500.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all scored CVEs.
- Low exploitation riskCVE-2026-505270.84% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 54% of all scored CVEs.
Referenced CVEs
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- high[UPDATE] [high] Microsoft Developer Tools: Multiple Vulnerabilitiescert-bund
- highGHSA-j8gr-8fp3-5q5h: Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerabilityghsa
- highGHSA-55jh-fwmh-39m4: Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerabilityghsa
- highGHSA-8prm-248r-h957: Microsoft Security Advisory CVE-2026-47300 – .NET Elevation of Privilege Vulnerabilityghsa
- highGHSA-2p3q-h3hg-jcqq: Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerabilityghsa
- highGHSA-mmjf-rqrv-855v: Microsoft Security Advisory CVE-2026-50527 – .NET Denial of Service Vulnerabilityghsa
- highGHSA-2969-4q4w-w5h3: Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerabilityghsa
- highGHSA-wp74-jgxh-gv4q: Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerabilityghsa
- mediumGHSA-74jp-vm22-8q8x: Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerabilityghsa
- highGHSA-8q5v-6pqq-x66h: Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerabilityghsa
- highGHSA-qvw7-jm5c-6hqw: Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerabilityghsa
- highGHSA-23rf-6693-g89p: Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerabilityghsa
Recent advisories for Microsoft DeveloperTools
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- high[UPDATE] [high] Microsoft DeveloperTools: Multiple vulnerabilitiescert-bund · 2026-07-17
More from CERT-Bund (BSI) Security Advisories
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow Denial of Service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow unspecified attack2026-07-31