CVE-2026-62871 Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally

Description

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

Affected products and versions

Product	Affected versions	Fixed in
.NET 10.0 10.0	10.0.0 → < 10.0.11	10.0.11
.NET 8.0 8.0	8.0.0 → < 8.0.30	8.0.30
.NET 9.0 9.0	9.0.0 → < 9.0.19	9.0.19
Microsoft Visual Studio 2022 version 17.14 17.14	17.14.0 → < 17.14.38	17.14.38
Microsoft Visual Studio 2026 version 18.8 18.0	18.0 → < 18.8.3	18.8.3
.NET 8.0 runtime 8.0	8.0.0 → < 8.0.30	8.0.30
.NET 9.0 runtime 9.0	9.0.0 → < 9.0.19	9.0.19

Other CVEs of .NET 10.0

The 70 CVEs of .NET 10.0 →

CVE-2026-105016 Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network 9.8 Critical CVE-2026-58280 Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network 7.5 High CVE-2026-96957 Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature… 8.8 High CVE-2026-96234 Origin validation error in .NET allows an unauthorized attacker to disclose information over a network 5.3 Medium