Description
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft .NET 10.0
10.0.0 to < 10.0.8affected
Microsoft .NET 8.0
8.0.0 to < 8.0.27affected
Microsoft .NET 9.0
9.0.0 to < 9.0.16affected
Microsoft Microsoft .NET Framework 3.5
3.5.0 to < 4.8.9334.0 and 4.8.4802.0affected
Microsoft Microsoft .NET Framework 3.5 AND 4.7.2
4.7.0 to < 4.8.9334.0 and 4.8.4802.0affected
Microsoft Microsoft .NET Framework 3.5 AND 4.8
4.8.0 to < 4.8.9334.0 and 4.8.4802.0affected
Microsoft Microsoft .NET Framework 3.5 AND 4.8.1
4.8.1 to < 4.8.9334.0 and 4.8.4802.0affected
Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
4.7.0 to < 4.8.9334.0 and 4.8.4802.0affected
Microsoft Microsoft .NET Framework 4.8
4.8.0 to < 4.8.9334.0 and 4.8.4802.0affected
Microsoft Microsoft Visual Studio 2022 version 17.12
17.12.0 to < 17.12.20affected
Microsoft Microsoft Visual Studio 2022 version 17.14
17.14.0 to < 17.14.32affected
Microsoft Microsoft Visual Studio 2026 version 18.5
18.5.0 to < 18.5.3affected