Microsoft Visual Studio is an integrated development environment (IDE) from Microsoft. It is used to develop computer programs for Microsoft Windows, as well as websites, web applications, and web services.

Visual Studio 2022

ASP.NET Core is a free, open-source, and cross-platform web development framework developed by Microsoft. It allows developers to build modern, cloud-based, and internet-connected applications such as web apps, IoT apps, and mobile backends. ASP.NET Core provides a modular and high-performance environment for creating web applications and services that can run on Windows, macOS, and Linux.

ASP.NET Core

AlmaLinux OS is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release. AlmaLinux OS is a 1:1 binary compatible fork of RHEL®, guided and built by the community.

Alma Linux

.NET Core SDK is a set of libraries and tools that allow developers to create .NET Core applications and libraries. It includes the .NET Core runtime for running applications, but also provides additional capabilities for building, testing, and debugging .NET Core applications. The SDK also includes a command line interface (CLI) for performing various tasks such as project creation, code compilation, and package management.

.NET Core SDK

Ubuntu is a Linux distribution based on Debian, mostly composed of free and open-source software. Ubuntu is officially released in three editions: Desktop, Server, and Core for internet of things devices and robots. All the editions can run on the computer alone or in a virtual machine.

Linux Ubuntu

Red Hat Enterprise Linux is a Linux distribution developed by Red Hat for the commercial market.

Linux Red Hat

Oracle Linux is a Linux distribution packaged and freely distributed by Oracle, available partially under the GNU General Public License since late 2006. It is compiled from Red Hat Enterprise Linux source code, replacing Red Hat branding with Oracle's.

Linux Oracle

Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2026-21256	HIGH	8.8	Visual Studio 2022	cpe:2.3:a:microsoft:visual_studio_2022	No	Yes	Feb 10, 2026
CVE-2026-21257	HIGH	8	Visual Studio 2022	cpe:2.3:a:microsoft:visual_studio_2022	No	Yes	Feb 10, 2026
CVE-2026-32203	HIGH	7.5	Visual Studio 2022	dotnet-runtime-dbg-9.0	No	Yes	Apr 14, 2026
CVE-2026-32178	HIGH	7.5	C#	aspnetcore-runtime-8.0	No	Yes	Apr 14, 2026
CVE-2025-62214	MEDIUM	6.7	Visual Studio 2022	cpe:2.3:a:microsoft:visual_studio_2022	No	Yes	Nov 11, 2025

CVE-2026-32203:
Visual Studio 2022 vulnerability analysis and mitigation

7.5

Related Visual Studio 2022 vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2026-32203: Visual Studio 2022 vulnerability analysis and mitigation