CVE-2026-69805: CWE-73: External Control of File Name or Path in Microsoft Microsoft Visual Studio 2022 version 17.14

CVE-2026-69805 is a vulnerability classified under CWE-73 (External Control of File Name or Path) affecting Microsoft Visual Studio 2022 version 17.14 and related versions. The issue allows an attacker to externally control file names or paths within .NET components, potentially leading to privilege escalation over a network. The vulnerability has been assigned a CVSS 3.1 base score of 7.5, indicating high severity, with attack vector network, high attack complexity, no privileges required, and user interaction required. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

Successful exploitation of this vulnerability can result in an unauthorized attacker elevating privileges on the affected system remotely. The impact includes high confidentiality, integrity, and availability consequences as indicated by the CVSS vector. However, no known exploits are currently active in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for Visual Studio 2022 version 17.14 and related affected versions as soon as possible. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69805 for detailed patch information and deployment instructions.