CVE-2026-69522

HighCVSS 8.8/10Last modified Sep 29, 2026

Description

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Sep 8, 2026
Last modified
Sep 29, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-695248.1Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.CVE-2026-695259.8Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.CVE-2026-695275.5Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.CVE-2026-695287.8Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.CVE-2026-695298.8Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.CVE-2026-69535.1HTML injection vulnerability in Intermark IT's WebControl CMS v3.5. This vulnerability allows an attacker to send an email containing maliciCVE-2026-695308.1Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.CVE-2026-695315.5Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.CVE-2026-695327.8Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-695347.8Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allowCVE-2026-695357.8Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.CVE-2026-695367.1Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVE-2026-69522: High severity, CVSS 8.8 | Vulnix