{"id":"GHSA-mqvm-gmc4-6rv2","revision":"0951c3ec71f74489bc211a1fc06dff08","records":[{"revision":"0951c3ec71f74489bc211a1fc06dff08","observedAt":"2026-10-23T16:01:25.029+00:00","statement":{"source":"osv","id":"GHSA-mqvm-gmc4-6rv2","aliases":[],"title":"Duplicate Advisory: Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability","description":"### Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-527h-q9f6-p7qx. This link is maintained to preserve external references.\n\n### Original Description\nHeap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.","state":2,"publishedAt":"2026-09-08T18:32:35+00:00","modifiedAt":"2026-09-09T16:15:05.5238256+00:00","affected":[{"ecosystem":"NuGet","name":"Microsoft.DiaSymReader.Native","ranges":[{"type":"ECOSYSTEM","events":[{"kind":"introduced","version":"17.10.0-beta1.24272.1"},{"kind":"fixed","version":"18.9.0-beta1.26405.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2026-69439","https://github.com/dotnet/runtime","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439"],"sourceUrl":"https://github.com/advisories/GHSA-mqvm-gmc4-6rv2","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-mqvm-gmc4-6rv2","identifiers":["GHSA-mqvm-gmc4-6rv2"]},"retained":false,"historicalAffected":[]}],"coverage":[]}