CVE-2026-71328
Fixed upstream EPSS <1%CVSS 8.8
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Products: Microsoft .NET 10.0, Microsoft .NET 11.0, Microsoft .NET 8.0, Microsoft .NET 9.0, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.9
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| NuGet | Microsoft.DiaSymReader.Native | 18.9.0-beta1.26405.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 22.04 LTS | dotnet7 | no fix |