Vulnerability in Microsoft Visual Studio 2017 version 15.9

[ Description ]Official description

Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

[ Fixes ]Fixes and patches

• Security bulletin: Microsoft CVE-2026-118147Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118147, cited by CERT-FR CERTFR-2026-AVI-1441

[ Advisories ]Government CERT advisories

• CERT-FR2 Nov 2026CERTFR-2026-AVI-1441

  Vulnerability in Microsoft Visual Studio Translated from French

  A vulnerability has been discovered in Microsoft Visual Studio. It allows an attacker to cause a security policy bypass.

  CVE-2026-118147
• BSI CERT-Bund1 Nov 2026WID-SEC-2026-4262

  Microsoft Visual Studio: Vulnerability allows information disclosure Translated from German

  CVE-2026-118147

[ References ]References

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118147