ALPINE-CVE-2026-114158: Buffer Overflow
Published Nov 10, 2026
·Updated
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Affected Software
7 affected componentsFixes available
alpine/dotnet10-runtime<10.0.15-r0
10.0.15-r0
alpine/dotnet8-runtime<8.0.34-r0
8.0.34-r0
alpine/dotnet8-runtime<8.0.34-r0
8.0.34-r0
alpine/dotnet8-runtime<8.0.34-r0
8.0.34-r0
alpine/dotnet9-runtime<9.0.23-r0
9.0.23-r0
alpine/dotnet9-runtime<9.0.23-r0
9.0.23-r0
alpine/dotnet9-runtime<9.0.23-r0
9.0.23-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/dotnet10-runtimeto a version that resolves this vulnerability.Fixed in 10.0.15-r0 - Upgrade
Upgrade
alpine/dotnet8-runtimeto a version that resolves this vulnerability.Fixed in 8.0.34-r0 - Upgrade
Upgrade
alpine/dotnet9-runtimeto a version that resolves this vulnerability.Fixed in 9.0.23-r0
Event History
Nov 10, 2026
CVE Published
via OSV·07:19 PM
Data Sourced
via OSV·07:19 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The issue is remotely exploitable over a network and does not require prior privileges. Exploitation does require user interaction.
2
What is the potential impact if exploitation succeeds?
A successful exploit could allow an attacker to execute code. The provided severity vector indicates high potential impact to confidentiality, integrity, and availability.