{"id":"EUVD-2026-73781","enisaUuid":"3a3262c9-2b9e-31df-872f-47698e645201","description":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","datePublished":"Sep 8, 2026, 5:18:10 PM","dateUpdated":"Oct 31, 2026, 4:16:46 PM","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328\n","aliases":"CVE-2026-71328\nGHSA-4qhr-qf46-fcrx\nGHSA-63gh-g2x5-x69v\n","assigner":"microsoft","epss":0.82,"enisaIdProduct":[{"id":"053d5198-475c-35cd-b984-6f725074689a","product":{"name":".NET 10.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.12"},{"id":"0a2b710f-4178-3935-b99f-e4caf3b0f186","product":{"name":".NET 8.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.31"},{"id":"1374245a-fc6e-3800-ab83-71862027f924","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}},"product_version":"18.9.0 \u003c18.9.3"},{"id":"51c40d34-7158-33c4-bfad-aa0533091a3b","product":{"name":".NET 9.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.20"},{"id":"96f62bed-4b3b-3902-981e-a84f40af8928","product":{"name":".NET 11.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"11.0.0 \u003c11.0 RC1"},{"id":"a241dc32-cc10-315d-bcb2-2e7c08143621","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.40"}],"enisaIdVendor":[{"id":"e3fda1bb-16dd-3d82-aefb-e5e368cf3fda","vendor":{"name":"Microsoft"}}],"enisaIdVulnerability":[{"id":"812a1204-d326-326e-a270-0564728fd2bd","vulnerability":{"id":"GHSA-63gh-g2x5-x69v","description":"Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability","datePublished":"Sep 9, 2026, 4:01:52 PM","dateUpdated":"Sep 9, 2026, 4:01:53 PM","baseScore":0.0,"references":"https://github.com/dotnet/runtime/security/advisories/GHSA-63gh-g2x5-x69v\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-71328\nhttps://github.com/dotnet/runtime\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328\n","enisa_id":"EUVD-2026-73781\n","aliases":"GHSA-63gh-g2x5-x69v\nCVE-2026-71328\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:05:47 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"9b7fff55-d12c-330b-b494-f5e3faf2bf35","vulnerability":{"id":"GHSA-4qhr-qf46-fcrx","description":"Duplicate Advisory: Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability","datePublished":"Sep 8, 2026, 6:33:08 PM","dateUpdated":"Sep 9, 2026, 4:01:47 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-71328\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328\nhttps://www.nuget.org/packages/Microsoft.DiaSymReader.Native\n","enisa_id":"EUVD-2026-73781\n","aliases":"GHSA-4qhr-qf46-fcrx\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:05:08 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"df1be07f-0bcb-3c39-8669-ef8c793ab03b","vulnerability":{"id":"CVE-2026-71328","description":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","datePublished":"Sep 8, 2026, 5:18:10 PM","dateUpdated":"Oct 31, 2026, 4:16:46 PM","status":"PUBLISHED","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328\n","enisa_id":"EUVD-2026-73781\n","assigner":"microsoft","epss":0.82,"dataProcessed":"Nov 3, 2026, 7:13:43 AM","vulnerabilityProduct":[{"id":"0c11a629-06e5-3262-8160-d1d960f50da3","product":{"name":".NET 9.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.20"},{"id":"24f683ca-4e1a-33dc-9c26-e9a76cb5355f","product":{"name":".NET 10.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.12"},{"id":"d00d5e58-42f8-39ac-8a46-18bd12f8ceba","product":{"name":".NET 8.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.31"},{"id":"e0dfb8a1-c855-3743-8f16-c29c5f0091bf","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.40"},{"id":"ec9ad33d-a56a-388e-9064-00e794afb0a1","product":{"name":".NET 11.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"11.0.0 \u003c11.0 RC1"},{"id":"fdd87938-5fbf-3b6d-a992-92bec15351ca","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}},"product_version":"18.9.0 \u003c18.9.3"}],"vulnerabilityVendor":[{"id":"73ae7949-cb42-34d1-bc1e-5605edbc13b5","vendor":{"name":"Microsoft"}}]}}],"enisaIdAdvisory":[{"id":"36517965-765c-396a-9dc9-af12efd17a76","advisory":{"id":"msrc_CVE-2026-71328","description":".NET and Visual Studio Remote Code Execution Vulnerability","datePublished":"Sep 8, 2026, 7:00:00 AM","dateUpdated":"Sep 8, 2026, 7:00:00 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-71328.json\n","aliases":"CVE-2026-71328\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"02aabf93-32c5-3793-abcd-4ab2b5562957","product":{"name":"10.0.12","vendor":{"name":"Grafana"}}},{"id":"1489418b-ac5d-32f6-99ec-ba62cd74d97f","product":{"name":"8.0.31","vendor":{"name":"Microsoft"}}},{"id":"64e3fef8-2dcc-35e4-9788-ef05c1d893f0","product":{"name":".NET 9.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"657cc6a8-4173-3a46-a684-f8e9b475caae","product":{"name":".NET 11.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"72f2963e-a65d-31a5-aec5-3b9df30118e1","product":{"name":".NET 8.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"a3a83f91-7f22-339e-9844-fcdee4b0610a","product":{"name":"11.0 RC1","vendor":{"name":"Microsoft"}}},{"id":"c15e7b19-2b34-36c1-bd4d-854e8efce0ec","product":{"name":"18.9.3","vendor":{"name":"open source"}}},{"id":"d5b97634-4139-3f9a-8263-86ff6aee9f69","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}}},{"id":"e60a0bb6-9429-39fe-ad6a-31d46d6352ff","product":{"name":"17.14.40","vendor":{"name":"Microsoft"}}},{"id":"e9eaf490-0ad2-3933-95ab-acdd846a4a3a","product":{"name":".NET 10.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"f3b06f36-3459-3678-968e-2814bb9ebb7e","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}}},{"id":"f796e6c8-c476-3525-be76-97b8aeba1f09","product":{"name":"9.0.20","vendor":{"name":"open source"}}}]}}]}