CVE-2026-69522

Fixed upstream EPSS <1%CVSS 8.8

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Published 2026-09-08 · CVE record · OSV

Products: Microsoft .NET 10.0, Microsoft .NET 11.0, Microsoft .NET 8.0, Microsoft .NET 9.0, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 3.5 AND 4.7.2, Microsoft .NET Framework 3.5 AND 4.8, Microsoft .NET Framework 3.5 AND 4.8.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.8, Microsoft .NET Framework 4.8.1, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.9

Fixed upstream

Distro releases