{"id":"CVE-2026-69439","sourceIdentifier":"secure@microsoft.com","published":"2026-09-08T18:19:07.960","lastModified":"2026-09-29T14:05:54.677","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network."}],"affected":[{"source":"secure@microsoft.com","affectedData":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"version":"10.0.0","lessThan":"10.0.12","versionType":"custom","status":"affected"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom","status":"affected"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"version":"8.0.0","lessThan":"8.0.31","versionType":"custom","status":"affected"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"version":"9.0.0","lessThan":"9.0.20","versionType":"custom","status":"affected"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"version":"17.14.0","lessThan":"17.14.40","versionType":"custom","status":"affected"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"version":"18.9.0","lessThan":"18.9.3","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"secure@microsoft.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-09T04:18:13.070091Z","id":"CVE-2026-69439","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secure@microsoft.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.31","matchCriteriaId":"120A5F2F-CD6D-4EA6-ABBC-4AE8C397F722"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0.0","versionEndExcluding":"9.0.20","matchCriteriaId":"40FA0BC2-46E4-425A-941B-B042FA960EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.12","matchCriteriaId":"C3766C06-8F63-4266-AA40-E8DCC9A87F01"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:11.0.0:preview1:*:*:*:*:*:*","matchCriteriaId":"5DACF2FE-CF61-43E4-8A3F-F7A358DE8A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:11.0.0:preview2:*:*:*:*:*:*","matchCriteriaId":"280B2E64-3163-40AB-A048-14D58DEC42FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:11.0.0:preview3:*:*:*:*:*:*","matchCriteriaId":"12357908-3294-46EF-85A0-DA3F86C97489"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:11.0.0:preview4:*:*:*:*:*:*","matchCriteriaId":"849FC8F5-86CD-4B5D-ADFD-9CB16EA75D09"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:11.0.0:preview5:*:*:*:*:*:*","matchCriteriaId":"C86E87E2-B236-4AC9-B6C3-64B9CDEC91EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:11.0.0:preview6:*:*:*:*:*:*","matchCriteriaId":"9B14656E-2BB0-4B4B-B518-F3D5108253ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:11.0.0:preview7:*:*:*:*:*:*","matchCriteriaId":"E09C9DB3-F42C-4442-9CF0-24A780D094C8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"17.14.0","versionEndExcluding":"17.14.40","matchCriteriaId":"8FD99987-130F-47E5-B6FE-9C6701D7C3F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*","versionStartIncluding":"18.9.0","versionEndExcluding":"18.9.3","matchCriteriaId":"C66064BF-3349-43FF-8A22-9370663193DE"}]}]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]}]}