{"id":"CVE-2026-114152","kind":"vulnerability","aliases":["CVE-2026-114152"],"related":[],"title":"Visual Studio: stack buffer overflow lets a network attacker run code","description":"Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","summary":"A stack-based buffer overflow in Visual Studio lets an unauthorized attacker run code over the network. The sources do not describe the affected component, the triggering input, or any user action required.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Visual Studio","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["other","visual-studio","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:19:08+00:00","first_seen_at":"2026-11-10T19:24:43+00:00","triaged_at":"2026-11-10T19:31:44+00:00","updated_at":"2026-11-10T19:31:44+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-11-10T19:31:44Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Visual Studio: stack buffer overflow lets a network attacker run code","impact":"high","summary":"A stack-based buffer overflow in Visual Studio lets an unauthorized attacker run code over the network. The sources do not describe the affected component, the triggering input, or any user action required.","audience":"developers","category":"other","nicknames":[],"who_cares":["visual-studio","windows"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker runs code on the developer's machine over the network","analyst_note":"Check the Microsoft Security Update Guide entry for CVE-2026-114152 for affected versions, fixed builds, and whether a user action is required.","how_to_check":"unknown","plain_action":"","product_name":"Visual Studio","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000636,"input_tokens":4488,"output_tokens":375,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check the Microsoft Security Update Guide entry for CVE-2026-114152 for affected versions, fixed builds, and whether a user action is required.","search":"'-114152':14A,17A '-2026':13A,16A 'action':57B 'affect':49B 'allow':67C 'attack':9A,37B,70C 'base':28B,61C 'buffer':4A,29B,62C 'code':11A,39B,73C 'compon':50B 'cve':12A,15A 'describ':47B 'execut':72C 'input':53B 'let':6A,34B 'network':8A,42B,76C 'overflow':5A,30B,63C 'requir':58B 'run':10A,38B 'sourc':44B 'stack':3A,27B,60C 'stack-bas':26B,59C 'studio':2A,19A,23B,33B,66C 'trigger':52B 'unauthor':36B,69C 'user':56B 'visual':1A,18A,22B,32B,65C 'visual-studio':21B 'window':24B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"pkeys":["studio","visualstudio"],"ptokens":["studio","visual"],"labels":["high","other","vendor","visualstudio","windows"],"campaign_type":null,"search_a":"'-114152':14A,17A '-2026':13A,16A 'attack':9A 'buffer':4A 'code':11A 'cve':12A,15A 'let':6A 'network':8A 'overflow':5A 'run':10A 'stack':3A 'studio':2A,19A 'visual':1A,18A","search_b":"'action':57B 'affect':49B 'attack':37B 'base':28B 'buffer':29B 'code':39B 'compon':50B 'describ':47B 'input':53B 'let':34B 'network':42B 'overflow':30B 'requir':58B 'run':38B 'sourc':44B 'stack':27B 'stack-bas':26B 'studio':23B,33B 'trigger':52B 'unauthor':36B 'user':56B 'visual':22B,32B 'visual-studio':21B 'window':24B","search_c":"'allow':67C 'attack':70C 'base':61C 'buffer':62C 'code':73C 'execut':72C 'network':76C 'overflow':63C 'stack':60C 'stack-bas':59C 'studio':66C 'unauthor':69C 'visual':65C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:08+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114152","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114152","severity":null,"published_at":"2026-11-10T19:19:08+00:00","modified_at":"2026-11-10T19:19:08+00:00","first_seen_at":"2026-11-10T19:24:43+00:00","fetched_at":"2026-11-10T19:24:43+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}