CVE-2026-69806

Summary

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

Affected Software

VendorProductVersion RangeStatus
Microsoft.NET 10.010.0.0 < 10.0.111, 10.0.400affected
Microsoft.NET 11.011.0.0 < 11.0 RC1affected
Microsoft.NET 9.09.0.0 < 9.0.317affected
MicrosoftMicrosoft Visual Studio 2022 version 17.1417.14.0 < 17.14.40affected
MicrosoftMicrosoft Visual Studio 2026 version 18.918.9.0 < 18.9.3affected

Weaknesses

  • CWE-200: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
  • CWE-94: CWE-94: Improper Control of Generation of Code ('Code Injection')

References