Dashboard / CVE-2026-69806

CVE-2026-69806

HIGH
MEDIUM Priority: 0.06 BB Relevance: 29/100
Published: 2026-09-08 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: High
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

Weakness Classification (2)

Affected Software (14)

VendorProductVersion
Microsoft .NET 10.0 runtime 10.0.0 < 10.0.12
Microsoft .NET 11.0 runtime 11.0.0 < 11.0 RC1
Microsoft .NET 9.0 runtime 9.0.0 < 9.0.20
Microsoft Microsoft Visual Studio 2022 version 17.14 17.14.0 < 17.14.40
Microsoft Microsoft Visual Studio 2026 version 18.9 18.9.0 < 18.9.3
microsoft .net 9.0.0 – 9.0.20
microsoft .net 11.0.0
microsoft .net 11.0.0
microsoft .net 11.0.0
microsoft .net 11.0.0
microsoft .net 11.0.0
microsoft .net 11.0.0
microsoft visual_studio_2022 17.14.0 – 17.14.40
microsoft visual_studio_2026 18.9.0 – 18.9.3

References & Advisories (1)

Bug Bounty Relevance

29 / 100
✓ No user interaction

CVSS Score

7.0 / 10.0 v3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.82%
Raw Score 0.008240
Percentile 57.3%
Date 2026-10-30

Intelligence Sources

mitre ref →
nvd ref →

External Links