Threats tagged 'ghsa-2j8r-3c22-8565'

CVE-2026-69522 is a high severity remote code execution vulnerability in Microsoft.DiaSymReader.Native affecting Windows platforms. It involves an out-of-bounds write when processing PDB files, leading to a heap-based buffer overflow (CWE-122). The flaw impacts multiple .NET versions and Visual Studio components. A patch is available in version 18.9.0-beta1.26405.2 and the September 2026 .NET Framework security update. Users should update to these versions and restart applications to mitigate the risk.