NCSC-2026-0056

csafNLncsc_nl

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in Microsoft Developer Tools

view advisory published 2026-02-10

Microsoft heeft kwetsbaarheden verholpen in diverse componenten van Visual Studio en .NET.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2026-21523US——
Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network.
CVE-2026-21518US——
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security fe…
CVE-2026-21516UShigh7.8—
Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an unauthorized attacker to execute code over a network.
CVE-2026-21257US——
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an authorized attacker to elevate privileges over a n…
CVE-2026-21256US——
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code over a netwo…
CVE-2026-21218US——
Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network.
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan