Description:
Microsoft has released security updates to address multiple vulnerabilities in several Microsoft products or components.
Affected Systems:
- Microsoft Visual Studio 2019, 2022, 2026
- .NET Framework 8.0, 9.0, 10.0, 11.0
- .NET Core 8.0, 9.0, 10.0, 11.0
- ASP.NET Core 9.0
- PowerShell 7.4, 7.5, 7.6
For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.
Impact:
Successful exploitation of the vulnerabilities could lead to remote code execution, denial of service or information disclosure on an affected system.
Recommendation:
Patches for affected products are available from vendor websites. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.
More Information:
- https://github.com/PowerShell/Announcements/blob/main/pwsh/2026/10/CVE-2026-111497.md
- https://github.com/dotnet/core/blob/main/release-notes/11.0/preview/rc3/11.0.0-rc.3.md
- https://learn.microsoft.com/en-us/visualstudio/releases/2019/release-notes
- https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
- https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes
- https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes-insiders
- https://support.microsoft.com/help/5133964
- https://support.microsoft.com/help/5133965
- https://support.microsoft.com/help/5133966
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-114148
