GHSA-4qhr-qf46-fcrx

Summary

Duplicate Advisory: Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

Severity

high

CVSS

8.8

CWE

CWE-122

Published

2026-09-08

Updated

2026-09-09

Advisory details

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-63gh-g2x5-x69v. This link is maintained to preserve external references.

Original Description

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

References

• https://github.com/advisories/GHSA-4qhr-qf46-fcrx
• https://nvd.nist.gov/vuln/detail/CVE-2026-71328
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328

Related advisories

• CVE-2026-69522 — high · NuGet/Microsoft.DiaSymReader.Native
• CVE-2026-69439 — high · NuGet/Microsoft.DiaSymReader.Native
• CVE-2026-71328 — high · NuGet/Microsoft.DiaSymReader.Native
• GHSA-q72m-f2r4-w4cw — high · NuGet/Microsoft.DiaSymReader.Native
• GHSA-mqvm-gmc4-6rv2 — high · NuGet/Microsoft.DiaSymReader.Native
• GHSA-rgj7-g3m4-5g8c — high · npm/sharp
• CVE-2026-62871 — high · NuGet/Microsoft.WindowsDesktop.App.Runtime.win-arm64
• CVE-2026-62886 — high · NuGet/Microsoft.WindowsDesktop.App.Runtime.win-arm64

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity