Microsoft Visual Studio 产品的 17.14.4218.10.4 安全更新（2026 年 10 月）
critical Nessus 插件 ID 366085
语言：
简介
Microsoft Visual Studio 产品受到多个漏洞的影响。描述
Microsoft Visual Studio 产品缺少安全更新。因此，该应用程序受到多个漏洞的影响：- Microsoft QUIC 中基于堆的缓冲区溢出允许未经授权的攻击者通过网络执行代码。（CVE-2026-105016）
- ASP.NET Core 中对 http 请求的不一致解释（“http 请求/响应走私”）允许未经授权的攻击者通过网络执行篡改。（CVE-2026-88092）
- ASP.NET Core 中 http 请求的不一致解释（“http 请求/响应走私”）允许未经授权的攻击者通过网络绕过安全功能。（CVE-2026-70188）
请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。
解决方案
Microsoft 已发布下列安全更新以解决此问题：- Visual Studio 2022 的 Update 17.14.42
- Visual Studio 2026 的更新18.10.4
另见
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102869
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102870
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105016
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58280
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66822
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69651
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70007
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70035
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70159
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70161
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70162
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70165
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70174
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70175
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70179
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70181
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70183
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70186
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70188
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70190
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70194
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70196
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70197
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83520
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84008
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85363
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85790
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87697
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88092
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92707
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96222
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96224
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96225
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96229
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96230
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96231
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96232
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96234
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96235
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96236
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96237
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96238
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96957
插件详情
严重性: Critical
ID: 366085
文件名: smb_nt_ms26_oct_visual_studio_cve_2026_102869.nasl
版本: 1.3
类型: Local
代理: windows
发布时间: 2026/10/15
最近更新时间: 2026/10/16
支持的传感器: Nessus Agent, Nessus
风险信息
VPR
风险因素: Medium
分数: 6.9
百分位: 96.42
CVSS v2
风险因素: Critical
基本分数: 10
时间分数: 7.4
矢量: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS 分数来源: CVE-2026-96957
CVSS v3
风险因素: Critical
基本分数: 9.8
时间分数: 8.5
矢量: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
时间矢量: CVSS:3.0/E:U/RL:O/RC:C
CVSS 分数来源: CVE-2026-105016
漏洞信息
CPE: cpe:/a:microsoft:visual_studio
必需的 KB 项: SMB/MS_Bulletin_Checks/Possible, SMB/Registry/Enumerated, installed_sw/Microsoft Visual Studio
易利用性: No known exploits are available
补丁发布日期: 2026/10/13
漏洞发布日期: 2026/10/13
参考资料信息
CVE: CVE-2026-102869, CVE-2026-102870, CVE-2026-103572, CVE-2026-105016, CVE-2026-58280, CVE-2026-66822, CVE-2026-69651, CVE-2026-70007, CVE-2026-70035, CVE-2026-70159, CVE-2026-70161, CVE-2026-70162, CVE-2026-70165, CVE-2026-70174, CVE-2026-70175, CVE-2026-70179, CVE-2026-70181, CVE-2026-70183, CVE-2026-70186, CVE-2026-70188, CVE-2026-70190, CVE-2026-70194, CVE-2026-70196, CVE-2026-70197, CVE-2026-83520, CVE-2026-84008, CVE-2026-85363, CVE-2026-85790, CVE-2026-87697, CVE-2026-88092, CVE-2026-92707, CVE-2026-96222, CVE-2026-96224, CVE-2026-96225, CVE-2026-96229, CVE-2026-96230, CVE-2026-96231, CVE-2026-96232, CVE-2026-96234, CVE-2026-96235, CVE-2026-96236, CVE-2026-96237, CVE-2026-96238, CVE-2026-96957