High severity7.3NVD Advisory· Published May 12, 2026· Updated Jul 15, 2026

CVE-2026-32177

Description

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

Microsoft/Net2 versions
cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*range: >=8.0.0,<8.0.27
- (no CPE)
Microsoft/.net Framework7 versions
cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*
Microsoft/Visual Studio2 versions
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*+ 1 more
- cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*range: >=17.12.0,<17.12.20
- cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*range: >=18.5.0,<18.5.3
osv-coords2 versions
pkg:bitnami/dotnet pkg:bitnami/dotnet-sdk
>= 8.0.0, < 8.0.27+ 1 more
- (no CPE)range: >= 8.0.0, < 8.0.27
- (no CPE)range: >= 8.0.0, < 8.0.27