Vulnerability in Microsoft Visual Studio 2022 version 17.14

[ Description ]Official description

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

[ Fixes ]Fixes and patches

• Security bulletin: Microsoft CVE-2026-109461Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109461, cited by CERT-FR CERTFR-2026-AVI-1332
• Security bulletin: Microsoft CVE-2026-109468Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109468, cited by CERT-FR CERTFR-2026-AVI-1332
• Security bulletin: Microsoft CVE-2026-108452Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108452, cited by CERT-FR CERTFR-2026-AVI-1332
• Security bulletin: Microsoft CVE-2026-80092Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80092, cited by CERT-FR CERTFR-2026-AVI-1332

[ Advisories ]Government CERT advisories

• CERT-FR16 Oct 2026CERTFR-2026-AVI-1332

  Multiple vulnerabilities in Microsoft products Translated from French

  Multiple vulnerabilities have been discovered in Microsoft products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.

  CVE-2026-109461CVE-2026-80092CVE-2026-108452+1 more CVEs
• BSI CERT-Bund13 Oct 2026WID-SEC-2026-3893

  Microsoft Entwicklerwerkzeuge: Multiple vulnerabilities Translated from German

  Risk highCVE-2026-96230CVE-2026-84008CVE-2026-102238+64 more CVEs

[ References ]References

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109468