{"schema_version":"2","view":"grouped","data":[{"id":60495,"cve_ids":["CVE-2026-69806"],"payload":{"kind":"advisory","title":".NET Elevation of Privilege Vulnerability","summary":"Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.","evidence":"cve:CVE-2026-69806","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-69806","aliases":["CVE-2026-69806"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:14:52.830Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69806"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-69806","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-10T18:26:08.285062Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-10T18:26:15.052Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:14:52.830Z"}}},"related_cves":[{"value":"CVE-2026-69806","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:af3e18d0-d42d-430a-8da1-441979f8d2d1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-69806","metrics":[],"products":[{"name":{"value":"dotnet","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-2026-69806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69806","metrics":[],"products":[{"name":{"value":"dotnet-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-sdk-2026-69806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-69806","advisory_id":"af3e18d0-d42d-430a-8da1-441979f8d2d1","event_types":["advisory"],"published_at":"2026-10-25T18:34:33.5399+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-08T17:19:29.823+00:00","detail_url":"/advisories/advisory%3Aaf3e18d0-d42d-430a-8da1-441979f8d2d1","group":{"id":"advisory:af3e18d0-d42d-430a-8da1-441979f8d2d1","revision":1,"primary_event_id":59757,"change":"published","superseded_by":[],"changed":{"id":59757,"cve_ids":["CVE-2026-69806"],"payload":{"kind":"advisory","title":".NET Elevation of Privilege Vulnerability","summary":"Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.","evidence":"cve:CVE-2026-69806","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-69806","aliases":["CVE-2026-69806"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:14:52.830Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69806"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-69806","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-10T18:26:08.285062Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-10T18:26:15.052Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:14:52.830Z"}}},"related_cves":[{"value":"CVE-2026-69806","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:af3e18d0-d42d-430a-8da1-441979f8d2d1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-69806","metrics":[],"products":[{"name":{"value":"dotnet","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-2026-69806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69806","metrics":[],"products":[{"name":{"value":"dotnet-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-sdk-2026-69806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-69806","advisory_id":"af3e18d0-d42d-430a-8da1-441979f8d2d1","event_types":["advisory"],"published_at":"2026-10-25T18:34:33.5399+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-9-0"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-08T17:19:29.823+00:00","detail_url":"/events/59757"},"members":[{"id":59757,"cve_ids":["CVE-2026-69806"],"payload":{"kind":"advisory","title":".NET Elevation of Privilege Vulnerability","summary":"Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.","evidence":"cve:CVE-2026-69806","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-69806","aliases":["CVE-2026-69806"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:14:52.830Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69806"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-69806","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-10T18:26:08.285062Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-10T18:26:15.052Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:14:52.830Z"}}},"related_cves":[{"value":"CVE-2026-69806","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:af3e18d0-d42d-430a-8da1-441979f8d2d1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-69806","metrics":[],"products":[{"name":{"value":"dotnet","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-2026-69806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69806","metrics":[],"products":[{"name":{"value":"dotnet-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-sdk-2026-69806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-69806","advisory_id":"af3e18d0-d42d-430a-8da1-441979f8d2d1","event_types":["advisory"],"published_at":"2026-10-25T18:34:33.5399+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-9-0"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-08T17:19:29.823+00:00","detail_url":"/events/59757"}]}}],"next_after":60495,"next_before":60495}