ALPINE-CVE-2026-114159: Buffer Overflow

Q: What does an attacker need to exploit this issue?

The supplied vector indicates that exploitation can be performed over a network with low attack complexity and no prior privileges, but it requires user interaction.

Q: Which deployments should be triaged?

The affected software listed for this record is alpine/dotnet9-runtime. Systems running that package should be reviewed.

Published Nov 10, 2026

Updated

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Affected Software

1 affected componentFixes available

alpine/dotnet9-runtime<9.0.23-r0

9.0.23-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade alpine/dotnet9-runtime to a version that resolves this vulnerability.
Fixed in 9.0.23-r0

Event History

Nov 10, 2026

CVE Published

via OSV·07:19 PM

Data Sourced

via OSV·07:19 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What does an attacker need to exploit this issue?

The supplied vector indicates that exploitation can be performed over a network with low attack complexity and no prior privileges, but it requires user interaction.

Which deployments should be triaged?

The affected software listed for this record is alpine/dotnet9-runtime. Systems running that package should be reviewed.

ALPINE-CVE-2026-114159: Buffer Overflow

Affected Software

Remediation

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which deployments should be triaged?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which deployments should be triaged?