8.8

CVE-2026-69522

Medienbericht

.NET and Visual Studio Remote Code Execution Vulnerability

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerMicrosoft
≫
Produkt .NET 10.0
Version 10.0.0
Version < 10.0.12
Status affected
HerstellerMicrosoft
≫
Produkt .NET 11.0
Version 11.0.0
Version < 11.0 RC1
Status affected
HerstellerMicrosoft
≫
Produkt .NET 8.0
Version 8.0.0
Version < 8.0.31
Status affected
HerstellerMicrosoft
≫
Produkt .NET 9.0
Version 9.0.0
Version < 9.0.20
Status affected
HerstellerMicrosoft
≫
Produkt Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
Version 3.0.0.0
Version < 2.0.50727.8984 & 3.0.30729.8980 & 4.7.4145.0
Status affected
HerstellerMicrosoft
≫
Produkt Microsoft .NET Framework 3.5 AND 4.7.2
Version 4.7.0
Version < 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4145.0
Status affected
HerstellerMicrosoft
≫
Produkt Microsoft .NET Framework 3.5 AND 4.8
Version 4.8.0
Version < 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4806.0
Status affected
HerstellerMicrosoft
≫
Produkt Microsoft .NET Framework 3.5 AND 4.8.1
Version 4.8.1
Version < 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9347.0
Status affected
HerstellerMicrosoft
≫
Produkt Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
Version 4.7.0
Version < 4.7.4145.0
Status affected
HerstellerMicrosoft
≫
Produkt Microsoft .NET Framework 4.8
Version 4.8.0
Version < 4.8.4806.0
Status affected
HerstellerMicrosoft
≫
Produkt Microsoft .NET Framework 4.8.1
Version 4.8.0.0
Version < 4.8.9347.0
Status affected
HerstellerMicrosoft
≫
Produkt Microsoft Visual Studio 2022 version 17.14
Version 17.14.0
Version < 17.14.40
Status affected
HerstellerMicrosoft
≫
Produkt Microsoft Visual Studio 2026 version 18.9
Version 18.9.0
Version < 18.9.3
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.81% 0.546
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Microsoft 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
08.09.2026 20:38
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522