← All advisories

High severity8.8NVD Advisory· Published Sep 8, 2026· Updated Sep 29, 2026

CVE-2026-69522

CVE-2026-69522

Description

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
Microsoft.DiaSymReader.NativeNuGet	>= 17.10.0-beta1.24272.1, < 18.9.0-beta1.26405.2	18.9.0-beta1.26405.2

Affected products

1

Microsoft/Visual Studiollm-fuzzy

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-2j8r-3c22-8565ghsaADVISORY
nvd.nist.gov/vuln/detail/cve-2026-69522ghsaADVISORY
github.com/dotnet/runtime/security/advisories/GHSA-2j8r-3c22-8565ghsaWEB
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522nvd

News mentions

2

Patch Tuesday - September 2026
Rapid7 Blog · Sep 8, 2026
Massive Microsoft Patch Tuesday September 2026 – 973 Vulnerabilities Fixed, Including 2 Zero-Days
Cyber Security News · Sep 8, 2026