CVE-2026-62909

Published August 11, 2026 · Source: nvd

Analysis

## Summary
CVE-2026-62909 describes an uncaught exception in .NET that can be triggered by an authorized local attacker to elevate privileges. The issue is classified as CWE-248 and has a CVSS score of 7.8 (AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness

CWE-252

Affected Products

• microsoft — visual studio 2022 (17.14.0 - 17.14.38 (exclusive))
• microsoft — visual studio 2026 (18.8.0 - 18.8.3 (exclusive))
• microsoft — .net (8.0.0 - 8.0.30 (exclusive))

References

• [email protected]

← Browse all CVEs