GHSA-hm4p-mv9w-4w8f: Duplicate Advisory: Microsoft Security Advisory CVE-2026-114152 - Visual Studio Remote Code Execution Vulnerability

Published Nov 10, 2026

Updated

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-xf35-v9jh-g65w. This link is maintained to preserve external references.

Original Description Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Affected Software

2 affected components

nuget/microsoft.netcore.app.runtime.win-x86>=8.0.0<8.0.34

nuget/microsoft.netcore.app.runtime.win-x86>=8.0.0

Event History

Nov 10, 2026

Advisory Published

via GitHub·09:32 PM

Data Sourced

via GitHub·09:32 PM

DescriptionSeverityWeaknessAffected Software

Nov 11, 2026

Withdrawn

via GitHub·12:39 AM

Frequently Asked Questions

Should this advisory be used for remediation decisions?

No. It was withdrawn as a duplicate of GHSA-xf35-v9jh-g65w, which should be used as the authoritative advisory for remediation and affected-version information.

What level of attacker access is described by the original advisory?

The original description states that an unauthorized attacker could execute code over a network. The supplied vector indicates network access, low attack complexity, no required privileges, and user interaction is required.

What is the potential impact if exploitation succeeds?

The supplied severity vector indicates high impact to confidentiality, integrity, and availability. The underlying weakness is identified as a stack-based buffer overflow.

GHSA-hm4p-mv9w-4w8f: Duplicate Advisory: Microsoft Security Advisory CVE-2026-114152 - Visual Studio Remote Code Execution Vulnerability

Affected Software

Event History

Frequently Asked Questions

Should this advisory be used for remediation decisions?

What level of attacker access is described by the original advisory?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Should this advisory be used for remediation decisions?

What level of attacker access is described by the original advisory?

What is the potential impact if exploitation succeeds?