GHSA-mqvm-gmc4-6rv2

Summary

Duplicate Advisory: Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

Severity

high

CVSS

8.8

CWE

CWE-122

Published

2026-09-08

Updated

2026-09-09

Advisory details

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-527h-q9f6-p7qx. This link is maintained to preserve external references.

Original Description

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

References

• https://github.com/advisories/GHSA-mqvm-gmc4-6rv2
• https://nvd.nist.gov/vuln/detail/CVE-2026-69439
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439

Related advisories

• CVE-2026-69522 — high · NuGet/Microsoft.DiaSymReader.Native
• CVE-2026-69439 — high · NuGet/Microsoft.DiaSymReader.Native
• CVE-2026-71328 — high · NuGet/Microsoft.DiaSymReader.Native
• GHSA-4qhr-qf46-fcrx — high · NuGet/Microsoft.DiaSymReader.Native
• GHSA-q72m-f2r4-w4cw — high · NuGet/Microsoft.DiaSymReader.Native
• GHSA-rgj7-g3m4-5g8c — high · npm/sharp
• CVE-2026-62871 — high · NuGet/Microsoft.WindowsDesktop.App.Runtime.win-arm64
• CVE-2026-62886 — high · NuGet/Microsoft.WindowsDesktop.App.Runtime.win-arm64

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity