Microsoft Security Response Center guidance
Vendor revision: Sep 25, 2026Vendor remediation details
Release Notes Install KB5126105. Install KB5126106.
Vendor-listed releases
- 18.9.3
- 17.14.40
- 9.0.20
- 10.0.12
- 11.0 RC1
Vulnerability intelligence
CVE-2026-69806 and is rated High severity with a CVSS score of 7.0. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Release Notes Install KB5126105. Install KB5126106.
Vendor-listed releases
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
Source: NVD