HIGH Published September 8, 2026

CVE-2026-69806

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

CVSS base score

7.0 (v3.1)

Severity

HIGH

Attack vector

Local

Weakness

CWE-94, CWE-200

Last modified

October 30, 2026

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

microsoft .net microsoft visual studio 2022 microsoft visual studio 2026

View full NVD advisory →

← Back to CVE watch