{"id":"CVE-2026-70197","revision":"89f9c93f457d418eab8ce7ed9e4494b6","records":[{"revision":"89f9c93f457d418eab8ce7ed9e4494b6","observedAt":"2026-10-25T20:02:02.581+00:00","statement":{"source":"cve-program","id":"CVE-2026-70197","aliases":[],"title":".NET and Visual Studio Remote Code Execution Vulnerability","description":"Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.","state":0,"publishedAt":"2026-10-13T19:00:26.869+00:00","modifiedAt":"2026-10-25T18:42:57.932+00:00","affected":[{"ecosystem":"Vendor product","name":".NET 10.0 installed on Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \".NET 10.0 installed on Linux\",\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.0\",\n                            \"lessThan\": \"10.0.403\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":".NET 10.0 installed on Mac OS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \".NET 10.0 installed on Mac OS\",\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.0\",\n                            \"lessThan\": \"10.0.403\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":".NET 10.0 installed on Windows","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \".NET 10.0 installed on Windows\",\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.0\",\n                            \"lessThan\": \"10.0.403\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":".NET 10.0 runtime","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \".NET 10.0 runtime\",\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.0\",\n                            \"lessThan\": \"10.0.13\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":".NET 11.0 installed on Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \".NET 11.0 installed on Linux\",\n                    \"versions\": [\n                        {\n                            \"version\": \"11.0.0-preview.1\",\n                            \"lessThan\": \"11.0.100-rc.3\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":".NET 11.0 installed on Mac OS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \".NET 11.0 installed on Mac OS\",\n                    \"versions\": [\n                        {\n                            \"version\": \"11.0.0-preview.1\",\n                            \"lessThan\": \"11.0.100-rc.3\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":".NET 11.0 installed on Windows","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \".NET 11.0 installed on Windows\",\n                    \"versions\": [\n                        {\n                            \"version\": \"11.0.0-preview.1\",\n                            \"lessThan\": \"11.0.100-rc.3.26522.148\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":".NET 11.0 runtime","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \".NET 11.0 runtime\",\n                    \"versions\": [\n                        {\n                            \"version\": \"11.0.0\",\n                            \"lessThan\": \"11.0.0-rc.2\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":".NET 8.0 installed on Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \".NET 8.0 installed on Linux\",\n                    \"versions\": [\n                        {\n                            \"version\": \"8.0.0\",\n                            \"lessThan\": \"8.0.427\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":".NET 8.0 installed on Mac OS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \".NET 8.0 installed on Mac OS\",\n                    \"versions\": [\n                        {\n                            \"version\": \"8.0.0\",\n                            \"lessThan\": \"8.0.427\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":".NET 8.0 installed on Windows","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \".NET 8.0 installed on Windows\",\n                    \"versions\": [\n                        {\n                            \"version\": \"8.0.0\",\n                            \"lessThan\": \"8.0.427\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":".NET 8.0 runtime","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \".NET 8.0 runtime\",\n                    \"versions\": [\n                        {\n                            \"version\": \"8.0.0\",\n                            \"lessThan\": \"8.0.32\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":".NET 9.0 installed on Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \".NET 9.0 installed on Linux\",\n                    \"versions\": [\n                        {\n                            \"version\": \"9.0.0\",\n                            \"lessThan\": \"9.0.320\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":".NET 9.0 installed on Mac OS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \".NET 9.0 installed on Mac OS\",\n                    \"versions\": [\n                        {\n                            \"version\": \"9.0.0\",\n                            \"lessThan\": \"9.0.320\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":".NET 9.0 installed on Windows","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \".NET 9.0 installed on Windows\",\n                    \"versions\": [\n                        {\n                            \"version\": \"9.0.0\",\n                            \"lessThan\": \"9.0.320\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":".NET 9.0 runtime","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \".NET 9.0 runtime\",\n                    \"versions\": [\n                        {\n                            \"version\": \"9.0.0\",\n                            \"lessThan\": \"9.0.21\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Microsoft Visual Studio 2019 version 16.11","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Microsoft Visual Studio 2019 version 16.11\",\n                    \"versions\": [\n                        {\n                            \"version\": \"16.11.0\",\n                            \"lessThan\": \"16.11.61\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Microsoft Visual Studio 2022 version 17.14","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Microsoft Visual Studio 2022 version 17.14\",\n                    \"versions\": [\n                        {\n                            \"version\": \"17.14.0\",\n                            \"lessThan\": \"17.14.43\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Microsoft Visual Studio 2026 version 18.10","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Microsoft Visual Studio 2026 version 18.10\",\n                    \"versions\": [\n                        {\n                            \"version\": \"18.10.0\",\n                            \"lessThan\": \"18.10.4\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Microsoft Visual Studio 2026 version 18.11","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Microsoft Visual Studio 2026 version 18.11\",\n                    \"versions\": [\n                        {\n                            \"version\": \"18.11.0\",\n                            \"lessThan\": \"18.11.2\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Microsoft Visual Studio 2026 version 18.12","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Microsoft Visual Studio 2026 version 18.12\",\n                    \"versions\": [\n                        {\n                            \"version\": \"18.12.0\",\n                            \"lessThan\": \"18.12 Insiders 3\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","score":8.1,"severity":"HIGH"}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70197"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-70197","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-70197","identifiers":["CVE-2026-70197"]},"retained":false,"historicalAffected":[]}],"coverage":[]}