.NET and Visual Studio Elevation of Privilege Vulnerability

Summary

Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Remediation

1. Inventory every Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 deployment, including staging.
2. Upgrade Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 to the fixed version for your release line, listed under Affected versions.
3. Confirm the running version after the upgrade.

References

• Patchhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102869