Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "17.14.0"
},
{
"fixed": "17.14.38"
}
],
"source": "CPE_RANGE",
"vendor_product": "microsoft:visual_studio_2022"
},
{
"cpes": [
"cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "18.8.0"
},
{
"fixed": "18.8.3"
}
],
"source": "CPE_RANGE",
"vendor_product": "microsoft:visual_studio_2026"
}
]
}