{"id":"EUVD-2026-73720","enisaUuid":"27c1a6d9-b6c2-316c-b346-009066845a07","description":"Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.","datePublished":"Sep 8, 2026, 5:17:35 PM","dateUpdated":"Oct 31, 2026, 4:16:12 PM","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439\n","aliases":"CVE-2026-69439\nGHSA-mqvm-gmc4-6rv2\nGHSA-527h-q9f6-p7qx\n","assigner":"microsoft","epss":0.82,"enisaIdProduct":[{"id":"02b1cdd6-0cd1-3d5f-9d6b-212fa9b10e2b","product":{"name":".NET 9.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.20"},{"id":"38e156ef-a65d-3d1d-aa5a-e6624b3e2e03","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.40"},{"id":"69f3b6cb-dcf6-3028-9493-3493bdb8dfb8","product":{"name":".NET 10.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.12"},{"id":"898c4828-6bc7-3219-89db-bc3bc174ce27","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}},"product_version":"18.9.0 \u003c18.9.3"},{"id":"a73bfcd4-86fc-3821-8a80-95958d17c849","product":{"name":".NET 11.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"11.0.0 \u003c11.0 RC1"},{"id":"e7dec6d0-d0fe-359f-9cb7-6b5cf8ea7abd","product":{"name":".NET 8.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.31"}],"enisaIdVendor":[{"id":"8222dc99-da1c-3715-bce5-1df58051d260","vendor":{"name":"Microsoft"}}],"enisaIdVulnerability":[{"id":"5aebd1b5-a3d0-3985-98cd-84000644be3b","vulnerability":{"id":"GHSA-527h-q9f6-p7qx","description":"Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability","datePublished":"Sep 9, 2026, 4:03:46 PM","dateUpdated":"Sep 9, 2026, 4:03:46 PM","baseScore":0.0,"references":"https://github.com/dotnet/runtime/security/advisories/GHSA-527h-q9f6-p7qx\nhttps://github.com/dotnet/runtime\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439\nhttps://nvd.nist.gov/vuln/detail/cve-2026-69439\n","enisa_id":"EUVD-2026-73720\n","aliases":"GHSA-527h-q9f6-p7qx\nCVE-2026-69439\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:05:47 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"84f7376f-70f5-3f05-b5df-a66c889c40c2","vulnerability":{"id":"GHSA-mqvm-gmc4-6rv2","description":"Duplicate Advisory: Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability","datePublished":"Sep 8, 2026, 6:32:35 PM","dateUpdated":"Sep 9, 2026, 4:02:52 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-69439\nhttps://github.com/dotnet/runtime\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439\n","enisa_id":"EUVD-2026-73720\n","aliases":"GHSA-mqvm-gmc4-6rv2\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:05:08 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"90f89270-a36a-3a59-818a-a989ac283e84","vulnerability":{"id":"CVE-2026-69439","description":"Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.","datePublished":"Sep 8, 2026, 5:17:35 PM","dateUpdated":"Oct 31, 2026, 4:16:12 PM","status":"PUBLISHED","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439\n","enisa_id":"EUVD-2026-73720\n","assigner":"microsoft","epss":0.82,"dataProcessed":"Nov 5, 2026, 7:16:35 AM","vulnerabilityProduct":[{"id":"114d02b7-f1fe-3b97-afff-bc4d8aa88fd8","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}},"product_version":"18.9.0 \u003c18.9.3"},{"id":"1607811c-bcbe-3e9c-a76c-cdc1dd08376a","product":{"name":".NET 10.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.12"},{"id":"62d3fc42-1be6-3e57-9543-f8ecb89fc8f3","product":{"name":".NET 9.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.20"},{"id":"82cbc1f7-05e6-329a-9916-260af1a0c8a4","product":{"name":".NET 8.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.31"},{"id":"99d9f577-9ef8-3f21-99cc-961f5c263366","product":{"name":".NET 11.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"11.0.0 \u003c11.0 RC1"},{"id":"fd6ee79c-1391-3f3c-86ec-8bf52bbceaea","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.40"}],"vulnerabilityVendor":[{"id":"f7b6b8d3-a309-3214-bd52-ff6d71dd2eee","vendor":{"name":"Microsoft"}}]}}],"enisaIdAdvisory":[{"id":"1bd4e4bb-f195-3ad1-8a0d-4bb6c2f7d743","advisory":{"id":"msrc_CVE-2026-69439","description":".NET and Visual Studio Elevation of Privilege Vulnerability","datePublished":"Sep 8, 2026, 7:00:00 AM","dateUpdated":"Sep 8, 2026, 7:00:00 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-69439.json\n","aliases":"CVE-2026-69439\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"1ca5b51f-9c23-3a05-948e-3f6def2769c6","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}}},{"id":"3e93a174-4006-3794-bc3a-da836dcdf71e","product":{"name":"17.14.40","vendor":{"name":"Microsoft"}}},{"id":"4189ec0c-86aa-3704-9da8-e00bb6e1cb3d","product":{"name":"18.9.3","vendor":{"name":"open source"}}},{"id":"4e007358-f011-3482-a1d9-527ce43793e1","product":{"name":".NET 8.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"6aca51f0-79a3-3e7e-a57f-d63bc9c8b599","product":{"name":"11.0 RC1","vendor":{"name":"Microsoft"}}},{"id":"8cf9664b-ec2b-3679-b7d3-659d7561ce37","product":{"name":"9.0.20","vendor":{"name":"open source"}}},{"id":"8d8a98ad-138e-397b-a055-1c4ba07b7ec3","product":{"name":"8.0.31","vendor":{"name":"Microsoft"}}},{"id":"c5266d8a-1041-3be5-b1c6-e09051a74480","product":{"name":".NET 11.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"cdca4013-684b-3f25-b9ef-d27d55cb443c","product":{"name":".NET 10.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"d49f5add-4d3e-3631-b997-ddf4aaf7f057","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}}},{"id":"e9138626-f15b-3ead-979a-588abdf69a18","product":{"name":"10.0.12","vendor":{"name":"Grafana"}}},{"id":"f871659c-9f7c-3a25-9c88-9a7479285bee","product":{"name":".NET 9.0 installed on Windows","vendor":{"name":"Microsoft"}}}]}}]}