https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:21:38.533341+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-69439 BELL-CVE-2026-69439 2026-10-03T08:21:38.664202+00:00

Affected: Alpaquita:25: dotnet8-runtime, Alpaquita:stream: dotnet8-runtime

 https://cve.radiocsirt.org/vuln/bit-dotnet-2026-69439 BIT-dotnet-2026-69439 — .NET and Visual Studio Elevation of Privilege Vulnerability 2026-10-03T08:21:38.664262+00:00

Affected: Bitnami: dotnet

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1146 certfr-2026-avi-1146 — De multiples vulnérabilités ont été découvertes dans Microsoft .Net. Certaines d'entre elles permettent à un attaquant… 2026-10-03T08:21:38.664291+00:00 certfr-2026-avi-1146 https://cve.radiocsirt.org/vuln/euvd-2026-381762 EUVD-2026-381762 2026-10-03T08:21:38.664309+00:00 EUVD-2026-381762 https://cve.radiocsirt.org/vuln/fkie_cve-2026-69439 fkie_cve-2026-69439 2026-10-03T08:21:38.664321+00:00

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

 https://cve.radiocsirt.org/vuln/ghsa-527h-q9f6-p7qx GHSA-527h-q9f6-p7qx — Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability 2026-10-03T08:21:38.664341+00:00

Affected: NuGet: Microsoft.DiaSymReader.Native

# Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

## Executive summary

Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

An out of bounds write can occur when parsing a Portable PDB file.

## Announcement

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/438

## CVSS Details

- **Version:** 3.1 - **Severity:** High - **Score:** 8.8 - **Vector:** `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H` - **Weakness:** CWE-122 (Heap-based Buffer Overflow)

## Affected Platforms

- **Platforms:** Windows - **Architectures:** All

## <a name="affected-packages"></a>Affected Packages The vulnerability affects any Microsoft .NET project if it uses any of affected package versions listed below

### <a name=".NET 11 RC1"></a>.NET 11 RC1 Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- [Microsoft.DiaSymReader.Native](https://www.nuget.org/packages/Microsoft.DiaSymReader.Native) | >= 17.10.0-beta1.24272.1, <= 18.9.0-beta1.26405.1 | 18.9.0-beta1.26405.2

### <a name=".NET 10"></a>.NET 10 Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- [Microsoft.DiaSymReader.Native](https://www.nug…

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-69439 msrc_CVE-2026-69439 — .NET and Visual Studio Elevation of Privilege Vulnerability 2026-10-03T08:21:38.664405+00:00 msrc_CVE-2026-69439 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-69439 UBUNTU-CVE-2026-69439 2026-10-03T08:21:38.664424+00:00

Affected: Ubuntu:22.04:LTS: dotnet7

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3242 WID-SEC-W-2026-3242 — Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2026-10-03T08:21:38.664442+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Entwicklerwerkzeugen ausnutzen, um seine Privilegien zu erhöhen, um Sicherheitsmechanismen zu umgehen, sowie Informationen zu manipulieren oder offenzulegen.