CVE-2026-102869

.NET and Visual Studio Elevation of Privilege Vulnerability

Published Oct 13, 2026 CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Description
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Microsoft microsoft Visual Studio 2022 Version 17.14
Vendors & Products Microsoft microsoft Visual Studio 2022 Version 17.14
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
Title .NET and Visual Studio Elevation of Privilege Vulnerability
First Time appeared Microsoft
Microsoft .net
Microsoft .net Framework
Microsoft microsoft Visual Studio 2026 Version 18.10
Microsoft visual Studio 2022
Weaknesses CWE-843
CPEs cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.10:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft .net
Microsoft .net Framework
Microsoft microsoft Visual Studio 2026 Version 18.10
Microsoft visual Studio 2022
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
microsoft
Published
Updated
Nov 10, 2026, 8:46 PM
Reserved
Sep 29, 2026, 5:27 PM
Status
Awaiting Analysis
Published
Oct 13, 2026, 7:17 PM
Modified
Oct 14, 2026, 4:18 AM