.NET and Visual Studio Remote Code Execution Vulnerability

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-69522 · Microsoft / collected KEV context

EUVD-2026-73170

GHSA-q72m-f2r4-w4cw

GHSA-2j8r-3c22-8565

cve-program · CVE-2026-69522

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522

euvd · EUVD-2026-73170

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522

nvd · CVE-2026-69522

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522

osv · GHSA-2j8r-3c22-8565

• https://github.com/dotnet/runtime/security/advisories/GHSA-2j8r-3c22-8565
• https://github.com/dotnet/announcements/issues/439
• https://github.com/dotnet/runtime
• https://nvd.nist.gov/vuln/detail/cve-2026-69522

osv · GHSA-q72m-f2r4-w4cw

• https://nvd.nist.gov/vuln/detail/CVE-2026-69522
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522
• https://www.nuget.org/packages/Microsoft.DiaSymReader.Native

• Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability · Advisory content revised · 4 Nov 2026
• .NET and Visual Studio Remote Code Execution Vulnerability · Affected-version evidence changed · 30 Oct 2026
• .NET and Visual Studio Remote Code Execution Vulnerability · Published vulnerability · 8 Sep 2026