HIGH 8.8 Microsoft

CVE-2026-71328

.NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Update 2026-Sep: .NET and Visual Studio Remote Code Execution Vulnerability

Affected Products

Microsoft Visual Studio 2026 version 18.9
.NET 10.0 installed on Windows
.NET 8.0 installed on Windows
.NET 9.0 installed on Windows
Microsoft Visual Studio 2022 version 17.14
.NET 11.0 installed on Windows

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328
https://nvd.nist.gov/vuln/detail/CVE-2026-71328

Published: 2026-09-08 · Source: Microsoft · Feed updated: 2026-10-27

This high severity vulnerability with a CVSS score of 8.8 was published on 2026-09-08 via Microsoft. Affected: Microsoft Visual Studio 2026 version 18.9, .NET 10.0 installed on Windows, .NET 8.0 installed on Windows and 3 more.

vulnfeed aggregates 18513 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.