# Microsoft Visual Studio 2026 version 18.3.

Every CVE that names Microsoft Visual Studio 2026 version 18.3 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [GitHub Copilot and Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-21256.md)
  `CVE-2026-21256` · CVE record: Microsoft Microsoft Visual Studio 2022 version 17.14 and 1 more · CVSS 8.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Command injection, Code injection
- [GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21257.md)
  `CVE-2026-21257` · CVE record: Microsoft Microsoft Visual Studio 2022 version 17.14 and 1 more · CVSS 8.0 High · Not analysed yet · Published 10 Feb 2026 · Tags: Command injection

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-visual-studio-2026-version-18-3>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-visual-studio-2026-version-18-3/>. Everything for agents: <https://agentprime.io/llms.txt>.