{"id":"EUVD-2026-73170","enisaUuid":"ae40b088-d1cc-3a97-bb46-a460cfafa99c","description":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","datePublished":"Sep 8, 2026, 5:10:32 PM","dateUpdated":"Oct 26, 2026, 11:24:50 PM","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522\n","aliases":"CVE-2026-69522\nGHSA-q72m-f2r4-w4cw\nGHSA-2j8r-3c22-8565\n","assigner":"microsoft","epss":0.84,"enisaIdProduct":[{"id":"4628b22a-40e5-3072-a548-a06bbf670ff4","product":{"name":".NET 10.0","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.12"},{"id":"493d9531-b60c-326c-ad0f-79e59426138a","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.40"},{"id":"5b4688f4-6127-3f62-8388-3eb270d40a1d","product":{"name":"Microsoft .NET Framework 4.8","vendor":{"name":"Microsoft"}},"product_version":"4.8.0 \u003c4.8.4806.0"},{"id":"637ee313-a0bd-34f6-a48f-c9d6704046a1","product":{"name":"Microsoft .NET Framework 4.8.1","vendor":{"name":"Microsoft"}},"product_version":"4.8.0.0 \u003c4.8.9347.0"},{"id":"808d1027-9c92-38e3-b781-0b0b0ebfca9a","product":{"name":"Microsoft .NET Framework 3.5 AND 4.8","vendor":{"name":"Microsoft"}},"product_version":"4.8.0 \u003c2.0.50727.9070 \u0026 3.0.30729.9068 \u0026 4.8.4806.0"},{"id":"81234154-8440-3d52-9ecc-3fc824e8593b","product":{"name":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","vendor":{"name":"Microsoft"}},"product_version":"3.0.0.0 \u003c2.0.50727.8984 \u0026 3.0.30729.8980 \u0026 4.7.4145.0"},{"id":"b511e09f-8169-31d5-b58b-3279c35a4405","product":{"name":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","vendor":{"name":"Microsoft"}},"product_version":"4.7.0 \u003c4.7.4145.0"},{"id":"bce94c14-4ae7-3519-bfd2-018911f1aaee","product":{"name":".NET 11.0","vendor":{"name":"Microsoft"}},"product_version":"11.0.0 \u003c11.0 RC1"},{"id":"bec56615-f58b-3ca2-9a9d-dec6e434aea2","product":{"name":".NET 9.0","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.20"},{"id":"c34d15bb-08f3-36c1-a2e2-1fda8d536fce","product":{"name":"Microsoft .NET Framework 3.5 AND 4.7.2","vendor":{"name":"Microsoft"}},"product_version":"4.7.0 \u003c2.0.50727.9070 \u0026 3.0.30729.9068 \u0026 4.7.4145.0"},{"id":"d04ae9cf-fbd3-3658-96d5-e67c48a287eb","product":{"name":".NET 8.0","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.31"},{"id":"ea5813cb-b2d7-350e-91ad-c35f452b006f","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}},"product_version":"18.9.0 \u003c18.9.3"},{"id":"ee29653a-b528-32c8-8381-669ecec9a0b1","product":{"name":"Microsoft .NET Framework 3.5 AND 4.8.1","vendor":{"name":"Microsoft"}},"product_version":"4.8.1 \u003c2.0.50727.9183 \u0026 3.0.30729.9169 \u0026 4.8.9347.0"}],"enisaIdVendor":[{"id":"57118b6e-6c96-3e32-a913-a901c74e8a78","vendor":{"name":"Microsoft"}}],"enisaIdVulnerability":[{"id":"af8bdcec-5b23-34e6-b203-9669b1f81b50","vulnerability":{"id":"GHSA-2j8r-3c22-8565","description":"Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability","datePublished":"Sep 9, 2026, 4:04:04 PM","dateUpdated":"Sep 9, 2026, 4:04:04 PM","baseScore":0.0,"references":"https://github.com/dotnet/runtime/security/advisories/GHSA-2j8r-3c22-8565\nhttps://github.com/dotnet/runtime\nhttps://nvd.nist.gov/vuln/detail/cve-2026-69522\n","enisa_id":"EUVD-2026-73170\n","aliases":"GHSA-2j8r-3c22-8565\nCVE-2026-69522\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:01:07 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"ea7f0ea1-9bf7-3b5f-a420-3db53bf47067","vulnerability":{"id":"CVE-2026-69522","description":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","datePublished":"Sep 8, 2026, 5:10:32 PM","dateUpdated":"Oct 26, 2026, 11:24:50 PM","status":"PUBLISHED","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522\n","enisa_id":"EUVD-2026-73170\n","assigner":"microsoft","epss":0.84,"dataProcessed":"Oct 28, 2026, 10:00:29 AM","vulnerabilityProduct":[{"id":"2f8ff618-6102-305e-bbef-2976cea45bcb","product":{"name":".NET 11.0","vendor":{"name":"Microsoft"}},"product_version":"11.0.0 \u003c11.0 RC1"},{"id":"4f05fe5e-2d35-3cec-864c-4eea4501acfb","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}},"product_version":"18.9.0 \u003c18.9.3"},{"id":"5a84109a-d883-3781-8744-dddc164fda1b","product":{"name":"Microsoft .NET Framework 4.8.1","vendor":{"name":"Microsoft"}},"product_version":"4.8.0.0 \u003c4.8.9347.0"},{"id":"64b341d2-e3f4-3af2-926e-cc5c82504aca","product":{"name":".NET 10.0","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.12"},{"id":"667b3af5-f8a3-38f9-ab8f-a6753e15137e","product":{"name":".NET 8.0","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.31"},{"id":"6a6b58f3-0141-367e-9613-01e70c4b3725","product":{"name":".NET 9.0","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.20"},{"id":"7aa36b90-7eab-3345-8bd2-3b86613bba3c","product":{"name":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","vendor":{"name":"Microsoft"}},"product_version":"4.7.0 \u003c4.7.4145.0"},{"id":"7b69b3f1-b0b6-3126-9f34-5d6515d05272","product":{"name":"Microsoft .NET Framework 4.8","vendor":{"name":"Microsoft"}},"product_version":"4.8.0 \u003c4.8.4806.0"},{"id":"82803374-8b4e-3cd2-8c21-d0d00606046b","product":{"name":"Microsoft .NET Framework 3.5 AND 4.8.1","vendor":{"name":"Microsoft"}},"product_version":"4.8.1 \u003c2.0.50727.9183 \u0026 3.0.30729.9169 \u0026 4.8.9347.0"},{"id":"a1fac0b1-8266-3383-adb9-bf4059a739b5","product":{"name":"Microsoft .NET Framework 3.5 AND 4.8","vendor":{"name":"Microsoft"}},"product_version":"4.8.0 \u003c2.0.50727.9070 \u0026 3.0.30729.9068 \u0026 4.8.4806.0"},{"id":"c090d71c-2654-3265-a88f-12f797b3d78b","product":{"name":"Microsoft .NET Framework 3.5 AND 4.7.2","vendor":{"name":"Microsoft"}},"product_version":"4.7.0 \u003c2.0.50727.9070 \u0026 3.0.30729.9068 \u0026 4.7.4145.0"},{"id":"d45cc705-2f99-3b88-aa77-e75ecb375573","product":{"name":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","vendor":{"name":"Microsoft"}},"product_version":"3.0.0.0 \u003c2.0.50727.8984 \u0026 3.0.30729.8980 \u0026 4.7.4145.0"},{"id":"ea8e5630-3597-30df-8761-ef760e33d0e8","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.40"}],"vulnerabilityVendor":[{"id":"e2f53c64-d2af-332b-8082-23cfc6aad110","vendor":{"name":"Microsoft"}}]}},{"id":"ed1257c7-f1ee-3c94-88bb-d0e6d3c4d817","vulnerability":{"id":"GHSA-q72m-f2r4-w4cw","description":"Duplicate Advisory: Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability","datePublished":"Sep 8, 2026, 6:32:43 PM","dateUpdated":"Sep 8, 2026, 9:06:05 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-69522\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522\nhttps://www.nuget.org/packages/Microsoft.DiaSymReader.Native\n","enisa_id":"EUVD-2026-73170\n","aliases":"GHSA-q72m-f2r4-w4cw\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:00:27 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"6660150a-b28b-327c-9a7e-0b62e1f86cfc","advisory":{"id":"msrc_CVE-2026-69522","description":".NET and Visual Studio Remote Code Execution Vulnerability","datePublished":"Sep 8, 2026, 7:00:00 AM","dateUpdated":"Sep 8, 2026, 7:00:00 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-69522.json\n","aliases":"CVE-2026-69522\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"149d4310-8dca-36e3-a3ac-f50d3cccf250","product":{"name":".NET 8.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"1d2ba6d4-2ae7-3649-98a0-c44adc9a9f2c","product":{"name":"Microsoft .NET Framework 3.5 AND 4.7.2","vendor":{"name":"Microsoft"}}},{"id":"280198b9-97e9-3d94-bae0-841a310a30cc","product":{"name":"11.0 RC1","vendor":{"name":"Microsoft"}}},{"id":"2838bab3-697f-3ebe-8de0-3665fdc22d88","product":{"name":"Microsoft .NET Framework 3.5 AND 4.8","vendor":{"name":"Microsoft"}}},{"id":"2cc0946f-2b7b-30ca-babc-f23b9c76e3db","product":{"name":"18.9.3","vendor":{"name":"open source"}}},{"id":"2d598532-3709-3942-8670-c752f6f69d27","product":{"name":"2.0.50727.9183 \u0026 3.0.30729.9169 \u0026 4.8.4806.0","vendor":{"name":"Microsoft"}}},{"id":"36cd086f-c99a-324e-85eb-74b4ed3293ed","product":{"name":"4.8.4806.0","vendor":{"name":"Microsoft"}}},{"id":"395e3062-736c-3412-bc4e-977d2b096148","product":{"name":"Microsoft .NET Framework 4.8","vendor":{"name":"Microsoft"}}},{"id":"422e2955-f99b-31d8-ba2c-b724083c33cd","product":{"name":"4.8.9347.0","vendor":{"name":"Microsoft"}}},{"id":"4c71e289-4b29-33e8-9c38-f1789bcf9aba","product":{"name":".NET 10.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"57645f87-414d-3a98-b1b1-1e6860561777","product":{"name":"17.14.40","vendor":{"name":"Microsoft"}}},{"id":"6d0701c5-100c-38a1-896a-b7663f388317","product":{"name":"2.0.50727.9183 \u0026 3.0.30729.9169 \u0026 4.8.9347.0","vendor":{"name":"Microsoft"}}},{"id":"8ba11bc3-178a-3a03-af57-0db10980805f","product":{"name":"8.0.31","vendor":{"name":"Microsoft"}}},{"id":"99dafd14-e76d-3ed6-bbdd-f29af8eb6306","product":{"name":".NET 11.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"9e27c0a3-1ae2-381b-913b-dcdf451b68b3","product":{"name":"4.7.4145.0","vendor":{"name":"Microsoft"}}},{"id":"a3b6d684-3ce7-376e-ad12-f9eca7fed4c8","product":{"name":".NET 9.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"a83ebb2d-dc9c-347f-ab7b-d6c9747e0c65","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}}},{"id":"aa0128ea-6235-3702-a4c3-57de507e2ba4","product":{"name":"Microsoft .NET Framework 3.5 AND 4.8.1","vendor":{"name":"Microsoft"}}},{"id":"aaf61097-e6c3-3b9e-9970-8928607e728b","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}}},{"id":"b4a4a120-be1f-32cf-a46d-13ee56e9bd1f","product":{"name":"Microsoft .NET Framework 4.8.1","vendor":{"name":"Microsoft"}}},{"id":"c485e016-7f1d-3152-b52a-b94cbe2964d5","product":{"name":"2.0.50727.9070 \u0026 3.0.30729.9068 \u0026 4.7.4145.0","vendor":{"name":"Microsoft"}}},{"id":"d46be2dd-47e5-348a-ac6d-2b0cb3c86c6a","product":{"name":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","vendor":{"name":"Microsoft"}}},{"id":"ea72089e-0793-33a0-a530-d65796899f74","product":{"name":"9.0.20","vendor":{"name":"open source"}}},{"id":"f1c2a233-c462-3b55-bf75-d55b1a398893","product":{"name":"10.0.12","vendor":{"name":"Grafana"}}},{"id":"f398e395-8f98-3cee-9300-70d16da334fa","product":{"name":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","vendor":{"name":"Microsoft"}}}]}}]}