Security Advisory catalog CVE-2026-70197 CVE-2026-70197 Published
.NET and Visual Studio Remote Code Execution Vulnerability Overview Affected History Connections
cve-program · CVE-2026-70197 Published .NET 10.0 installed on Linux Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 10.0 installed on Linux",
"versions": [
{
"version": "10.0.0",
"lessThan": "10.0.403",
"versionType": "custom",
"status": "affected"
}
]
} .NET 10.0 installed on Mac OS Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 10.0 installed on Mac OS",
"versions": [
{
"version": "10.0.0",
"lessThan": "10.0.403",
"versionType": "custom",
"status": "affected"
}
]
} .NET 10.0 installed on Windows Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 10.0 installed on Windows",
"versions": [
{
"version": "10.0.0",
"lessThan": "10.0.403",
"versionType": "custom",
"status": "affected"
}
]
} .NET 10.0 runtime Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 10.0 runtime",
"versions": [
{
"version": "10.0.0",
"lessThan": "10.0.13",
"versionType": "custom",
"status": "affected"
}
]
} .NET 11.0 installed on Linux Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 11.0 installed on Linux",
"versions": [
{
"version": "11.0.0-preview.1",
"lessThan": "11.0.100-rc.3",
"versionType": "custom",
"status": "affected"
}
]
} .NET 11.0 installed on Mac OS Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 11.0 installed on Mac OS",
"versions": [
{
"version": "11.0.0-preview.1",
"lessThan": "11.0.100-rc.3",
"versionType": "custom",
"status": "affected"
}
]
} .NET 11.0 installed on Windows Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 11.0 installed on Windows",
"versions": [
{
"version": "11.0.0-preview.1",
"lessThan": "11.0.100-rc.3.26522.148",
"versionType": "custom",
"status": "affected"
}
]
} .NET 11.0 runtime Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 11.0 runtime",
"versions": [
{
"version": "11.0.0",
"lessThan": "11.0.0-rc.2",
"versionType": "custom",
"status": "affected"
}
]
} .NET 8.0 installed on Linux Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 8.0 installed on Linux",
"versions": [
{
"version": "8.0.0",
"lessThan": "8.0.427",
"versionType": "custom",
"status": "affected"
}
]
} .NET 8.0 installed on Mac OS Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 8.0 installed on Mac OS",
"versions": [
{
"version": "8.0.0",
"lessThan": "8.0.427",
"versionType": "custom",
"status": "affected"
}
]
} .NET 8.0 installed on Windows Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 8.0 installed on Windows",
"versions": [
{
"version": "8.0.0",
"lessThan": "8.0.427",
"versionType": "custom",
"status": "affected"
}
]
} .NET 8.0 runtime Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 8.0 runtime",
"versions": [
{
"version": "8.0.0",
"lessThan": "8.0.32",
"versionType": "custom",
"status": "affected"
}
]
} .NET 9.0 installed on Linux Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 9.0 installed on Linux",
"versions": [
{
"version": "9.0.0",
"lessThan": "9.0.320",
"versionType": "custom",
"status": "affected"
}
]
} .NET 9.0 installed on Mac OS Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 9.0 installed on Mac OS",
"versions": [
{
"version": "9.0.0",
"lessThan": "9.0.320",
"versionType": "custom",
"status": "affected"
}
]
} .NET 9.0 installed on Windows Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 9.0 installed on Windows",
"versions": [
{
"version": "9.0.0",
"lessThan": "9.0.320",
"versionType": "custom",
"status": "affected"
}
]
} .NET 9.0 runtime Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 9.0 runtime",
"versions": [
{
"version": "9.0.0",
"lessThan": "9.0.21",
"versionType": "custom",
"status": "affected"
}
]
} Microsoft Visual Studio 2019 version 16.11 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Microsoft Visual Studio 2019 version 16.11",
"versions": [
{
"version": "16.11.0",
"lessThan": "16.11.61",
"versionType": "custom",
"status": "affected"
}
]
} Microsoft Visual Studio 2022 version 17.14 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Microsoft Visual Studio 2022 version 17.14",
"versions": [
{
"version": "17.14.0",
"lessThan": "17.14.43",
"versionType": "custom",
"status": "affected"
}
]
} Microsoft Visual Studio 2026 version 18.10 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Microsoft Visual Studio 2026 version 18.10",
"versions": [
{
"version": "18.10.0",
"lessThan": "18.10.4",
"versionType": "custom",
"status": "affected"
}
]
} Microsoft Visual Studio 2026 version 18.11 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Microsoft Visual Studio 2026 version 18.11",
"versions": [
{
"version": "18.11.0",
"lessThan": "18.11.2",
"versionType": "custom",
"status": "affected"
}
]
} Microsoft Visual Studio 2026 version 18.12 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Microsoft Visual Studio 2026 version 18.12",
"versions": [
{
"version": "18.12.0",
"lessThan": "18.12 Insiders 3",
"versionType": "custom",
"status": "affected"
}
]
}
nvd · CVE-2026-70197 Published No affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.
osv · GHSA-4mpw-cpwj-hxxj Published Microsoft.NETCore.App.Runtime.win-arm64 NuGet
ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32
31 explicitly affected versions 8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.2, 8.0.20, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.3, 8.0.30, 8.0.31, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8
Microsoft.NETCore.App.Runtime.win-x64 NuGet
ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32
31 explicitly affected versions 8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.2, 8.0.20, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.3, 8.0.30, 8.0.31, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8
Microsoft.NETCore.App.Runtime.win-x86 NuGet
ECOSYSTEM · introduced 8.0.0 → fixed 8.0.32
31 explicitly affected versions 8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.2, 8.0.20, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.3, 8.0.30, 8.0.31, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8
Microsoft.NETCore.App.Runtime.win-arm64 NuGet
ECOSYSTEM · introduced 11.0.0-preview.1 → fixed 11.0.0-rc.2
Microsoft.NETCore.App.Runtime.win-x64 NuGet
ECOSYSTEM · introduced 11.0.0-preview.1 → fixed 11.0.0-rc.2
Microsoft.NETCore.App.Runtime.win-x86 NuGet
ECOSYSTEM · introduced 11.0.0-preview.1 → fixed 11.0.0-rc.2
Microsoft.NETCore.App.Runtime.win-arm64 NuGet
ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21
21 explicitly affected versions 9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9
Microsoft.NETCore.App.Runtime.win-x64 NuGet
ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21
21 explicitly affected versions 9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9
Microsoft.NETCore.App.Runtime.win-x86 NuGet
ECOSYSTEM · introduced 9.0.0 → fixed 9.0.21
21 explicitly affected versions 9.0.0, 9.0.1, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.2, 9.0.20, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9
Microsoft.NETCore.App.Runtime.win-arm64 NuGet
ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13
13 explicitly affected versions 10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9
Microsoft.NETCore.App.Runtime.win-x64 NuGet
ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13
13 explicitly affected versions 10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9
Microsoft.NETCore.App.Runtime.win-x86 NuGet
ECOSYSTEM · introduced 10.0.0 → fixed 10.0.13
13 explicitly affected versions 10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9