{"id":"EUVD-2026-73720","enisaUuid":"27c1a6d9-b6c2-316c-b346-009066845a07","description":"Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.","datePublished":"Sep 8, 2026, 5:17:35 PM","dateUpdated":"Oct 14, 2026, 11:13:02 PM","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439\n","aliases":"CVE-2026-69439\nGHSA-mqvm-gmc4-6rv2\nGHSA-527h-q9f6-p7qx\n","assigner":"microsoft","epss":0.82,"enisaIdProduct":[{"id":"38e156ef-a65d-3d1d-aa5a-e6624b3e2e03","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.40"},{"id":"5564bc45-e301-31e8-844a-410d793bcdee","product":{"name":".NET 10.0","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.12"},{"id":"898c4828-6bc7-3219-89db-bc3bc174ce27","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}},"product_version":"18.9.0 \u003c18.9.3"},{"id":"9ac0a390-ed2c-3b77-a028-0ded42c544a8","product":{"name":".NET 11.0","vendor":{"name":"Microsoft"}},"product_version":"11.0.0 \u003c11.0 RC1"},{"id":"b9329396-d049-3389-810b-63bb4201b079","product":{"name":".NET 8.0","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.31"},{"id":"e2780580-f0bc-3459-91c4-5447a51685e7","product":{"name":".NET 9.0","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.20"}],"enisaIdVendor":[{"id":"8222dc99-da1c-3715-bce5-1df58051d260","vendor":{"name":"Microsoft"}}],"enisaIdVulnerability":[{"id":"5aebd1b5-a3d0-3985-98cd-84000644be3b","vulnerability":{"id":"GHSA-527h-q9f6-p7qx","description":"Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability","datePublished":"Sep 9, 2026, 4:03:46 PM","dateUpdated":"Sep 9, 2026, 4:03:46 PM","baseScore":0.0,"references":"https://github.com/dotnet/runtime/security/advisories/GHSA-527h-q9f6-p7qx\nhttps://github.com/dotnet/runtime\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439\nhttps://nvd.nist.gov/vuln/detail/cve-2026-69439\n","enisa_id":"EUVD-2026-73720\n","aliases":"GHSA-527h-q9f6-p7qx\nCVE-2026-69439\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:01:07 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"84f7376f-70f5-3f05-b5df-a66c889c40c2","vulnerability":{"id":"GHSA-mqvm-gmc4-6rv2","description":"Duplicate Advisory: Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability","datePublished":"Sep 8, 2026, 6:32:35 PM","dateUpdated":"Sep 9, 2026, 4:02:52 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-69439\nhttps://github.com/dotnet/runtime\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439\n","enisa_id":"EUVD-2026-73720\n","aliases":"GHSA-mqvm-gmc4-6rv2\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:00:27 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"90f89270-a36a-3a59-818a-a989ac283e84","vulnerability":{"id":"CVE-2026-69439","description":"Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.","datePublished":"Sep 8, 2026, 5:17:35 PM","dateUpdated":"Oct 14, 2026, 11:13:02 PM","status":"PUBLISHED","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439\n","enisa_id":"EUVD-2026-73720\n","assigner":"microsoft","epss":0.82,"dataProcessed":"Oct 30, 2026, 7:16:28 AM","vulnerabilityProduct":[{"id":"0bbac34f-3760-35fc-a07c-bab846199ae9","product":{"name":".NET 8.0","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.31"},{"id":"114d02b7-f1fe-3b97-afff-bc4d8aa88fd8","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}},"product_version":"18.9.0 \u003c18.9.3"},{"id":"28f294e0-23c8-3d55-935b-a2100ceb8306","product":{"name":".NET 11.0","vendor":{"name":"Microsoft"}},"product_version":"11.0.0 \u003c11.0 RC1"},{"id":"2f6f7358-da2f-30b4-a07b-202446bee63c","product":{"name":".NET 10.0","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.12"},{"id":"45565d92-e110-3998-b080-7f0040a66c3b","product":{"name":".NET 9.0","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.20"},{"id":"fd6ee79c-1391-3f3c-86ec-8bf52bbceaea","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.40"}],"vulnerabilityVendor":[{"id":"f7b6b8d3-a309-3214-bd52-ff6d71dd2eee","vendor":{"name":"Microsoft"}}]}}],"enisaIdAdvisory":[{"id":"1bd4e4bb-f195-3ad1-8a0d-4bb6c2f7d743","advisory":{"id":"msrc_CVE-2026-69439","description":".NET and Visual Studio Elevation of Privilege Vulnerability","datePublished":"Sep 8, 2026, 7:00:00 AM","dateUpdated":"Sep 8, 2026, 7:00:00 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-69439.json\n","aliases":"CVE-2026-69439\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"1ca5b51f-9c23-3a05-948e-3f6def2769c6","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}}},{"id":"3e93a174-4006-3794-bc3a-da836dcdf71e","product":{"name":"17.14.40","vendor":{"name":"Microsoft"}}},{"id":"4189ec0c-86aa-3704-9da8-e00bb6e1cb3d","product":{"name":"18.9.3","vendor":{"name":"open source"}}},{"id":"4e007358-f011-3482-a1d9-527ce43793e1","product":{"name":".NET 8.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"6aca51f0-79a3-3e7e-a57f-d63bc9c8b599","product":{"name":"11.0 RC1","vendor":{"name":"Microsoft"}}},{"id":"8cf9664b-ec2b-3679-b7d3-659d7561ce37","product":{"name":"9.0.20","vendor":{"name":"open source"}}},{"id":"8d8a98ad-138e-397b-a055-1c4ba07b7ec3","product":{"name":"8.0.31","vendor":{"name":"Microsoft"}}},{"id":"c5266d8a-1041-3be5-b1c6-e09051a74480","product":{"name":".NET 11.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"cdca4013-684b-3f25-b9ef-d27d55cb443c","product":{"name":".NET 10.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"d49f5add-4d3e-3631-b997-ddf4aaf7f057","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}}},{"id":"e9138626-f15b-3ead-979a-588abdf69a18","product":{"name":"10.0.12","vendor":{"name":"Grafana"}}},{"id":"f871659c-9f7c-3a25-9c88-9a7479285bee","product":{"name":".NET 9.0 installed on Windows","vendor":{"name":"Microsoft"}}}]}}]}