CVE-2026-71328(microsoft / .net)

LOWCVSS 8.8 · HIGH

Immediate actions

Recommended action window: Monitor and triage in normal cycle

NVD description

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

0.5/ 10 priority

Patch / fix

Weakness type (CWE)

CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

If you run products in this scope, you should treat this CVE as relevant to your environment.

Vendors

Products

.netvisual_studio_2022visual_studio_2026windows

2 versions affected across 4 products

Full discourse1 post

Okan Gürsoy@okangrs341d
@SerkutYILDIRIM Vay canına demek .net'te güvenlik açığı çıkmıyor. 🤣 CVE-2026-69522 CVSS 8.8Uzaktan kod çalıştırma (RCE) Eylül 2026 CVE-2026-71328 CVSS 8.8Uzaktan kod çalıştırma (RCE) Eylül 2026 CVE-2026-70007 CVSS 8.8 .NET Framework üzerinden uzaktan kod çalıştırma Ekim 2026
30082445
56 followersView on X

CPE platform detail11 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

11 of 11 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	.net	-	-	-
App	microsoft	.net	11.0.0	-	-
App	microsoft	.net	11.0.0	-	-
App	microsoft	.net	11.0.0	-	-
App	microsoft	.net	11.0.0	-	-
App	microsoft	.net	11.0.0	-	-
App	microsoft	.net	11.0.0	-	-
App	microsoft	.net	11.0.0	-	-
App	microsoft	visual_studio_2022	-	-	-
App	microsoft	visual_studio_2026	-	-	-
OS	microsoft	windows	-	-	-