CVE-2026-102869
CVE-2026-102869 · .NET and Visual Studio Elevation of Privilege Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVSS 8.8 · High · EPSS 0.7% · Fix available
- Published
- Updated
Affected products and versions
microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2
- Versions
- ≥ 3.0.0.0, < 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.7.2
- Versions
- ≥ 4.7.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.8
- Versions
- ≥ 4.8.0, < 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0: Affected (custom)
No fix published
microsoft .net framework 3.5 and 4.8.1
- Versions
- ≥ 4.8.1, < 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0: Affected (custom)
No fix published
microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2
- Versions
- ≥ 4.7.0, < 4.7.4150.0: Affected (custom)
Update to 4.7.4150.0
microsoft .net framework 4.8
- Versions
- ≥ 4.8.0, < 4.8.4811.0: Affected (custom)
Update to 4.8.4811.0
microsoft .net framework 4.8.1
- Versions
- ≥ 4.8.0.0, < 4.8.9363.0: Affected (custom)
Update to 4.8.9363.0
microsoft visual studio 2022 version 17.14
- Versions
- ≥ 17.14.0, < 17.14.42: Affected (custom)
Update to 17.14.42
microsoft visual studio 2026 version 18.10
- Versions
- ≥ 18.10.0, < 18.10.4: Affected (custom)
Update to 18.10.4