.NET and Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-69522
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-69522
.NET 10.0
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
.NET 11.0
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
.NET 8.0
Source reference: /containers/cna/affected/2/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
.NET 9.0
Source reference: /containers/cna/affected/3/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
Source reference: /containers/cna/affected/4/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Microsoft .NET Framework 3.5 AND 4.7.2
Source reference: /containers/cna/affected/5/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Microsoft .NET Framework 3.5 AND 4.8
Source reference: /containers/cna/affected/6/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Microsoft .NET Framework 3.5 AND 4.8.1
Source reference: /containers/cna/affected/7/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
Source reference: /containers/cna/affected/8/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Microsoft .NET Framework 4.8
Source reference: /containers/cna/affected/9/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Microsoft .NET Framework 4.8.1
Source reference: /containers/cna/affected/10/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Microsoft Visual Studio 2022 version 17.14
Source reference: /containers/cna/affected/11/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Microsoft Visual Studio 2026 version 18.9
Source reference: /containers/cna/affected/12/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Microsoft",
"product": ".NET 10.0",
"versions": [
{
"status": "affected",
"version": "10.0.0",
"lessThan": "10.0.12",
"versionType": "custom"
}
]
},
{
"vendor": "Microsoft",
"product": ".NET 11.0",
"versions": [
{
"status": "affected",
"version": "11.0.0",
"lessThan": "11.0 RC1",
"versionType": "custom"
}
]
},
{
"vendor": "Microsoft",
"product": ".NET 8.0",
"versions": [
{
"status": "affected",
"version": "8.0.0",
"lessThan": "8.0.31",
"versionType": "custom"
}
]
},
{
"vendor": "Microsoft",
"product": ".NET 9.0",
"versions": [
{
"status": "affected",
"version": "9.0.0",
"lessThan": "9.0.20",
"versionType": "custom"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
"versions": [
{
"status": "affected",
"version": "3.0.0.0",
"lessThan": "2.0.50727.8984 & 3.0.30729.8980 & 4.7.4145.0",
"versionType": "custom"
}
],
"platforms": [
"Windows 10 Version 1607 for 32-bit Systems",
"Windows 10 Version 1607 for x64-based Systems",
"Windows Server 2016"
]
},
{
"vendor": "Microsoft",
"product": "Microsoft .NET Framework 3.5 AND 4.7.2",
"versions": [
{
"status": "affected",
"version": "4.7.0",
"lessThan": "2.0.50727.9070 & 3.0.30729.9068 & 4.7.4145.0",
"versionType": "custom"
}
],
"platforms": [
"Windows 10 Version 1809 for 32-bit Systems",
"Windows 10 Version 1809 for ARM64-based Systems",
"Windows 10 Version 1809 for x64-based Systems",
"Windows Server 2019"
]
},
{
"vendor": "Microsoft",
"product": "Microsoft .NET Framework 3.5 AND 4.8",
"versions": [
{
"status": "affected",
"version": "4.8.0",
"lessThan": "2.0.50727.9070 & 3.0.30729.9068 & 4.8.4806.0",
"versionType": "custom"
}
],
"platforms": [
"Windows 10 Version 1809 for 32-bit Systems",
"Windows 10 Version 1809 for ARM64-based Systems",
"Windows 10 Version 1809 for x64-based Systems",
"Windows 10 Version 21H2 for 32-bit Systems",
"Windows 10 Version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for x64-based Systems",
"Windows 10 Version 22H2 for 32-bit Systems",
"Windows 10 Version 22H2 for ARM64-based Systems",
"Windows 10 Version 22H2 for x64-based Systems",
"Windows Server 2019",
"Windows Server 2022"
]
},
{
"vendor": "Microsoft",
"product": "Microsoft .NET Framework 3.5 AND 4.8.1",
"versions": [
{
"status": "affected",
"version": "4.8.1",
"lessThan": "2.0.50727.9183 & 3.0.30729.9169 & 4.8.9347.0",
"versionType": "custom"
}
],
"platforms": [
"Windows 10 Version 21H2 for 32-bit Systems",
"Windows 10 Version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for x64-based Systems",
"Windows 10 Version 22H2 for 32-bit Systems",
"Windows 10 Version 22H2 for ARM64-based Systems",
"Windows 10 Version 22H2 for x64-based Systems",
"Windows 11 Version 23H2 for ARM64-based Systems",
"Windows 11 Version 23H2 for x64-based Systems",
"Windows 11 Version 24H2 for ARM64-based Systems",
"Windows 11 Version 24H2 for x64-based Systems",
"Windows 11 Version 25H2 for ARM64-based Systems",
"Windows 11 Version 25H2 for x64-based Systems",
"Windows Server 2022",
"Windows Server 2025"
]
},
{
"vendor": "Microsoft",
"product": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
"versions": [
{
"status": "affected",
"version": "4.7.0",
"lessThan": "4.7.4145.0",
"versionType": "custom"
}
],
"platforms": [
"Windows Server 2012",
"Windows Server 2012 R2"
]
},
{
"vendor": "Microsoft",
"product": "Microsoft .NET Framework 4.8",
"versions": [
{
"status": "affected",
"version": "4.8.0",
"lessThan": "4.8.4806.0",
"versionType": "custom"
}
],
"platforms": [
"Windows 10 Version 1607 for 32-bit Systems",
"Windows 10 Version 1607 for x64-based Systems",
"Windows Server 2012",
"Windows Server 2012 R2",
"Windows Server 2016"
]
},
{
"vendor": "Microsoft",
"product": "Microsoft .NET Framework 4.8.1",
"versions": [
{
"status": "affected",
"version": "4.8.0.0",
"lessThan": "4.8.9347.0",
"versionType": "custom"
}
],
"platforms": [
"Windows 11 Version 26H1 for ARM64-based Systems",
"Windows 11 version 26H1 for x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Visual Studio 2022 version 17.14",
"versions": [
{
"status": "affected",
"version": "17.14.0",
"lessThan": "17.14.40",
"versionType": "custom"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Visual Studio 2026 version 18.9",
"versions": [
{
"status": "affected",
"version": "18.9.0",
"lessThan": "18.9.3",
"versionType": "custom"
}
]
}
]- Related CVEs
- CVE-2026-69522
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #24684 · Revision 1
- Added to Heist Feed
- Publisher date