MICROSOFT.NETCORE.APP.RUNTIME.WIN-X86 · GHSA-6rff-vv3p-7mrw · Package
NO FIX YET
This advisory is a withdrawn duplicate of GHSA-3cgx-w6gm-fqrx and describes a heap-based buffer overflow in Visual Studio. The original description says an unauthorized attacker can execute code over a network.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
The advisory is withdrawn as a duplicate of GHSA-3cgx-w6gm-fqrx, so the affected scope should be read from that advisory. The product data lists nuget:Microsoft.NETCore.App.Runtime.win-x86 from 8.0.0 before 8.0.34, but this entry gives no fixed version. unknown
Who cares dotnet, visual-studio, windows
Unknown from the sources.
No fix yet, per the sources.
This advisory has been withdrawn because it is a duplicate of GHSA-3cgx-w6gm-fqrx. This link is maintained to preserve external references.
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
GitHub Advisory Database, CC-BY 4.0. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.