GHSA-cfv6-4v53-fff6
Suggest an improvement- Source
- https://github.com/advisories/GHSA-cfv6-4v53-fff6
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/11/GHSA-cfv6-4v53-fff6/GHSA-cfv6-4v53-fff6.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-cfv6-4v53-fff6
- Withdrawn
- 2026-11-11T00:39:56Z
- Published
- 2026-11-10T21:33:10Z
- Modified
- 2026-11-11T01:00:31Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Duplicate Advisory: Microsoft Security Advisory CVE-2026-118745 - Visual Studio Remote Code Execution Vulnerability
- Details
-
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-x8x8-p968-x646. This link is maintained to preserve external references.
Original Description
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
- Database specific
{ "cwe_ids": [ "CWE-122" ], "github_reviewed": true, "github_reviewed_at": "2026-11-11T00:39:56Z", "nvd_published_at": "2026-11-10T19:19:51Z", "severity": "HIGH" }- References
Affected packages
NuGet / Microsoft.NETCore.App.Runtime.win-x86
Package
- Name
- Microsoft.NETCore.App.Runtime.win-x86
- View open source insights on deps.dev
- Purl
- pkg:nuget/Microsoft.NETCore.App.Runtime.win-x86
Affected versions
8.*
8.0.0
8.0.1
8.0.2
8.0.3
8.0.4
8.0.5
8.0.6
8.0.7
8.0.8
8.0.10
8.0.11
8.0.12
8.0.13
8.0.14
8.0.15
8.0.16
8.0.17
8.0.18
8.0.19
8.0.20
8.0.21
8.0.22
8.0.23
8.0.24
8.0.25
8.0.26
8.0.27
8.0.28
8.0.29
8.0.30
8.0.31
8.0.32
8.0.33
8.0.34
9.*
9.0.0
9.0.1
9.0.2
9.0.3
9.0.4
9.0.5
9.0.6
9.0.7
9.0.8
9.0.9
9.0.10
9.0.11
9.0.12
9.0.13
9.0.14
9.0.15
9.0.16
9.0.17
9.0.18
9.0.19
9.0.20
9.0.21
9.0.22
9.0.23
10.*
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.0.6
10.0.7
10.0.8
10.0.9
10.0.10
10.0.11
10.0.12
10.0.13
10.0.14
10.0.15
11.*
11.0.0