GHSA-6rff-vv3p-7mrw: Duplicate Advisory: Microsoft Security Advisory CVE-2026-114159 - Visual Studio Remote Code Execution Vulnerability

Published Nov 10, 2026

Updated

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-3cgx-w6gm-fqrx. This link is maintained to preserve external references.

Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Affected Software

2 affected components

nuget/microsoft.netcore.app.runtime.win-x86>=8.0.0<8.0.34

nuget/microsoft.netcore.app.runtime.win-x86>=8.0.0

Event History

Nov 10, 2026

Advisory Published

via GitHub·09:32 PM

Data Sourced

via GitHub·09:32 PM

DescriptionSeverityWeaknessAffected Software

Nov 11, 2026

Withdrawn

via GitHub·12:32 AM

Frequently Asked Questions

Should this advisory be used for remediation tracking?

No. This advisory was withdrawn as a duplicate of GHSA-3cgx-w6gm-fqrx and is retained only to preserve external references. Use the duplicate advisory for remediation and status tracking.

What does the original vulnerability description indicate about attacker access?

The original description states that an unauthorized attacker could execute code over a network through a heap-based buffer overflow. The supplied severity vector indicates no privileges are required, but user interaction is required.

GHSA-6rff-vv3p-7mrw: Duplicate Advisory: Microsoft Security Advisory CVE-2026-114159 - Visual Studio Remote Code Execution Vulnerability

Affected Software

Event History

Frequently Asked Questions

Should this advisory be used for remediation tracking?

What does the original vulnerability description indicate about attacker access?

Company

Resources

Contact

Frequently Asked Questions

Should this advisory be used for remediation tracking?

What does the original vulnerability description indicate about attacker access?