CMS AuthEnvelopedData Processing May Accept Forged Messages

🔗 CVE IDs covered (1)

🎯 Affected products6

• Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
• Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
• Microsoft Visual Studio 2022 version 17.14
• Microsoft Visual Studio 2026 version 18.9
• azl3 edk2 20240524git3e722403cd16-17 on Azure Linux 3.0
• azl3 openssl 3.3.5-5 on Azure Linux 3.0

✅ Remediation

KBRelease Notes (Security Update) — fixed build 16.11.60 KBRelease Notes (Security Update) — fixed build 15.9.83 KBRelease Notes (Security Update) — fixed build 17.14.40 KBCBL-Mariner Releases (Security Update) — fixed build 20240524git3e722403cd16-18 KBCBL-Mariner Releases (Security Update) — fixed build 3.3.7-2 KBRelease Notes (Security Update) — fixed build 18.9.3

🔗 References (10)

• advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34182
• patchhttps://www.catalog.update.microsoft.com/Search.aspx?q=Visual Studio 2019 16.11.60
• referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2019/release-notes
• patchhttps://www.catalog.update.microsoft.com/Search.aspx?q=Visual Studio 2017 15.9.83
• referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2017/vs2017-relnotes
• patchhttps://www.catalog.update.microsoft.com/Search.aspx?q=Visual Studio 2022 17.14.40
• referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
• referencehttps://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
• patchhttps://www.catalog.update.microsoft.com/Search.aspx?q=Visual Studio 2026 18.9.3
• referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes