Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
How could an attacker exploit this vulnerability?
An attacker could exploit this vulnerability by convincing a user or service to process a specially crafted Portable PDB file. Successful exploitation could allow the attacker to execute code with the privileges of the affected process.
What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain the privileges of the user account or service account running the affected process.
Security updates
17.14.42 — https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
18.10.4 — https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes
2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 — https://support.microsoft.com/help/5126868
2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 — https://support.microsoft.com/help/5127666
2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 — https://support.microsoft.com/help/5127685
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 — https://support.microsoft.com/help/5127683
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 — https://support.microsoft.com/help/5127687
4.7.4150.0 — https://support.microsoft.com/help/5127667
4.7.4150.0 — https://support.microsoft.com/help/5127668
4.8.4811.0 — https://support.microsoft.com/help/5127684
4.8.4811.0 — https://support.microsoft.com/help/5127686
4.8.4811.0 — https://support.microsoft.com/help/5127688
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 — https://support.microsoft.com/help/5127689
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 — https://support.microsoft.com/help/5127690
4.8.9363.0 — https://support.microsoft.com/help/5127691
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 — https://support.microsoft.com/help/5127692
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 — https://support.microsoft.com/help/5127693
2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 — https://support.microsoft.com/help/5127694
Vulnerabilities 1
-
High 8.8
.NET and Visual Studio Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
Revision history
-
#1
Information published.
References
-
CVE-2026-102869 .NET and Visual Studio Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102869
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss