{"id":"EUVD-2026-73781","enisaUuid":"3a3262c9-2b9e-31df-872f-47698e645201","description":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","datePublished":"Sep 8, 2026, 5:18:10 PM","dateUpdated":"Oct 14, 2026, 11:13:34 PM","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328\n","aliases":"CVE-2026-71328\nGHSA-4qhr-qf46-fcrx\nGHSA-63gh-g2x5-x69v\n","assigner":"microsoft","epss":0.82,"enisaIdProduct":[{"id":"1374245a-fc6e-3800-ab83-71862027f924","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}},"product_version":"18.9.0 \u003c18.9.3"},{"id":"2a234be7-11c5-3541-9c28-2f8a8e9d6d11","product":{"name":".NET 9.0","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.20"},{"id":"40a8ad5b-a239-31b4-a5f1-34606bc88b67","product":{"name":".NET 10.0","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.12"},{"id":"96180103-d419-3b07-8d84-7a8e42018dbd","product":{"name":".NET 8.0","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.31"},{"id":"a241dc32-cc10-315d-bcb2-2e7c08143621","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.40"},{"id":"ce5016ef-9818-3d28-a4a7-ce49f8767ad7","product":{"name":".NET 11.0","vendor":{"name":"Microsoft"}},"product_version":"11.0.0 \u003c11.0 RC1"}],"enisaIdVendor":[{"id":"e3fda1bb-16dd-3d82-aefb-e5e368cf3fda","vendor":{"name":"Microsoft"}}],"enisaIdVulnerability":[{"id":"812a1204-d326-326e-a270-0564728fd2bd","vulnerability":{"id":"GHSA-63gh-g2x5-x69v","description":"Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability","datePublished":"Sep 9, 2026, 4:01:52 PM","dateUpdated":"Sep 9, 2026, 4:01:53 PM","baseScore":0.0,"references":"https://github.com/dotnet/runtime/security/advisories/GHSA-63gh-g2x5-x69v\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-71328\nhttps://github.com/dotnet/runtime\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328\n","enisa_id":"EUVD-2026-73781\n","aliases":"GHSA-63gh-g2x5-x69v\nCVE-2026-71328\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:01:07 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"9b7fff55-d12c-330b-b494-f5e3faf2bf35","vulnerability":{"id":"GHSA-4qhr-qf46-fcrx","description":"Duplicate Advisory: Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability","datePublished":"Sep 8, 2026, 6:33:08 PM","dateUpdated":"Sep 9, 2026, 4:01:47 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-71328\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328\nhttps://www.nuget.org/packages/Microsoft.DiaSymReader.Native\n","enisa_id":"EUVD-2026-73781\n","aliases":"GHSA-4qhr-qf46-fcrx\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:00:27 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"df1be07f-0bcb-3c39-8669-ef8c793ab03b","vulnerability":{"id":"CVE-2026-71328","description":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","datePublished":"Sep 8, 2026, 5:18:10 PM","dateUpdated":"Oct 14, 2026, 11:13:34 PM","status":"PUBLISHED","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328\n","enisa_id":"EUVD-2026-73781\n","assigner":"microsoft","epss":0.82,"dataProcessed":"Oct 30, 2026, 7:13:56 AM","vulnerabilityProduct":[{"id":"34e5a6d6-971a-3d05-af28-f13ce2393903","product":{"name":".NET 9.0","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.20"},{"id":"393a385d-5dc3-3a37-8bc7-be31325ab9e2","product":{"name":".NET 8.0","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.31"},{"id":"b7ede58a-d00c-3cb1-981d-1af5b86d6d6e","product":{"name":".NET 11.0","vendor":{"name":"Microsoft"}},"product_version":"11.0.0 \u003c11.0 RC1"},{"id":"e0dfb8a1-c855-3743-8f16-c29c5f0091bf","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.40"},{"id":"e933765a-3d14-3336-a703-167ebe447d11","product":{"name":".NET 10.0","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.12"},{"id":"fdd87938-5fbf-3b6d-a992-92bec15351ca","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}},"product_version":"18.9.0 \u003c18.9.3"}],"vulnerabilityVendor":[{"id":"73ae7949-cb42-34d1-bc1e-5605edbc13b5","vendor":{"name":"Microsoft"}}]}}],"enisaIdAdvisory":[{"id":"36517965-765c-396a-9dc9-af12efd17a76","advisory":{"id":"msrc_CVE-2026-71328","description":".NET and Visual Studio Remote Code Execution Vulnerability","datePublished":"Sep 8, 2026, 7:00:00 AM","dateUpdated":"Sep 8, 2026, 7:00:00 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-71328.json\n","aliases":"CVE-2026-71328\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"02aabf93-32c5-3793-abcd-4ab2b5562957","product":{"name":"10.0.12","vendor":{"name":"Grafana"}}},{"id":"1489418b-ac5d-32f6-99ec-ba62cd74d97f","product":{"name":"8.0.31","vendor":{"name":"Microsoft"}}},{"id":"64e3fef8-2dcc-35e4-9788-ef05c1d893f0","product":{"name":".NET 9.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"657cc6a8-4173-3a46-a684-f8e9b475caae","product":{"name":".NET 11.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"72f2963e-a65d-31a5-aec5-3b9df30118e1","product":{"name":".NET 8.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"a3a83f91-7f22-339e-9844-fcdee4b0610a","product":{"name":"11.0 RC1","vendor":{"name":"Microsoft"}}},{"id":"c15e7b19-2b34-36c1-bd4d-854e8efce0ec","product":{"name":"18.9.3","vendor":{"name":"open source"}}},{"id":"d5b97634-4139-3f9a-8263-86ff6aee9f69","product":{"name":"Microsoft Visual Studio 2026 version 18.9","vendor":{"name":"Microsoft"}}},{"id":"e60a0bb6-9429-39fe-ad6a-31d46d6352ff","product":{"name":"17.14.40","vendor":{"name":"Microsoft"}}},{"id":"e9eaf490-0ad2-3933-95ab-acdd846a4a3a","product":{"name":".NET 10.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"f3b06f36-3459-3678-968e-2814bb9ebb7e","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}}},{"id":"f796e6c8-c476-3525-be76-97b8aeba1f09","product":{"name":"9.0.20","vendor":{"name":"open source"}}}]}}]}