CVE-2026-102869

EUVD-2026-100376
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
Type Confusion
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 53.5%
Windows Releases
Platform
Version
Windows 10
1607
KB5126868
1607
KB5127684
1809
KB5127666
1809
KB5127685
21H2
KB5127683
21H2
KB5127689
22H2
KB5127683
22H2
KB5127689
Windows 11
23H2
KB5127692
24H2
KB5127690
25H2
KB5127690
26H1
KB5127691
26H2
KB5127694
Windows Server 2012
Standard
KB5127667
Standard
KB5127686
Windows Server 2012 R2
Standard
KB5127668
Standard
KB5127688
Windows Server 2016
Standard
KB5126868
Standard
KB5127684
Windows Server 2019
Standard
KB5127666
Standard
KB5127685
Windows Server 2022
Standard
KB5127687
Standard
KB5127693
Windows Server 2025
Standard
KB5127690
Common Weakness Enumeration
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102869