---
id: CVE-2026-62886
title: >-
  Integer overflow or wraparound in .NET allows an unauthorized attacker to
  elevate privileges locally.
summary: >-
  Integer overflow or wraparound in .NET allows an unauthorized attacker to
  elevate privileges locally.
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
cwe:
  - CWE-122
  - CWE-190
vendor: microsoft
product: visual_studio_2022
affected:
  - 'visual_studio_2022 >= 17.14.0, < 17.14.38'
  - 'visual_studio_2026 >= 18.8.0, < 18.8.3'
  - '.net >= 8.0.0, < 8.0.30'
  - '.net >= 9.0.0, < 9.0.19'
  - '.net >= 10.0.0, < 10.0.11'
patched:
  - visual_studio_2022 17.14.38
  - visual_studio_2026 18.8.3
  - .net 10.0.11
published: '2026-08-11'
updated: '2026-09-08'
sourceUpdated: '2026-09-08T18:18:07.673'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-62886'
references:
  - url: 'https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62886'
    label: secure@microsoft.com
  - url: 'https://github.com/dotnet/wpf/security/advisories/GHSA-jqhp-238x-qhgf'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-62886'
  - url: 'https://github.com/dotnet/announcements/issues/430'
  - url: 'https://github.com/advisories/GHSA-jqhp-238x-qhgf'
tags:
  - nvd
  - cve.org
  - ghsa
  - nuget
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-08-12T03:55:31.768589Z'
epss: 0.00404
epssPercentile: 0.34506
aliases:
  - GHSA-jqhp-238x-qhgf
ecosystem: nuget
ingestedAt: '2026-08-11T19:48:29.073Z'
---

## Overview

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

## Affected

- `visual_studio_2022 >= 17.14.0, < 17.14.38`
- `visual_studio_2026 >= 18.8.0, < 18.8.3`
- `.net >= 8.0.0, < 8.0.30`
- `.net >= 9.0.0, < 9.0.19`
- `.net >= 10.0.0, < 10.0.11`

## Remediation

Upgrade past the affected range:

- `visual_studio_2022 17.14.38`
- `visual_studio_2026 18.8.3`
- `.net 10.0.11`

## Package advisory (CVE-2026-62886)

Affected packages:

- `Microsoft.WindowsDesktop.App.Runtime.win-arm64 >= 10.0.0, <= 10.0.10`
- `Microsoft.WindowsDesktop.App.Runtime.win-x64 >= 10.0.0, <= 10.0.10`
- `Microsoft.WindowsDesktop.App.Runtime.win-x86 >= 10.0.0, <= 10.0.10`
- `Microsoft.WindowsDesktop.App.Runtime.win-arm64 >= 9.0.0, <= 9.0.18`
- `Microsoft.WindowsDesktop.App.Runtime.win-x64 >= 9.0.0, <= 9.0.18`
- `Microsoft.WindowsDesktop.App.Runtime.win-x86 >= 9.0.0, <= 9.0.18`
- `Microsoft.WindowsDesktop.App.Runtime.win-arm64 >= 8.0.0, <= 8.0.29`
- `Microsoft.WindowsDesktop.App.Runtime.win-x64 >= 8.0.0, <= 8.0.29`
- `Microsoft.WindowsDesktop.App.Runtime.win-x86 >= 8.0.0, <= 8.0.29`

Patched in:

- `Microsoft.WindowsDesktop.App.Runtime.win-arm64 10.0.11`
- `Microsoft.WindowsDesktop.App.Runtime.win-x64 10.0.11`
- `Microsoft.WindowsDesktop.App.Runtime.win-x86 10.0.11`
- `Microsoft.WindowsDesktop.App.Runtime.win-arm64 9.0.19`
- `Microsoft.WindowsDesktop.App.Runtime.win-x64 9.0.19`
- `Microsoft.WindowsDesktop.App.Runtime.win-x86 9.0.19`
- `Microsoft.WindowsDesktop.App.Runtime.win-arm64 8.0.30`
- `Microsoft.WindowsDesktop.App.Runtime.win-x64 8.0.30`
- `Microsoft.WindowsDesktop.App.Runtime.win-x86 8.0.30`

Source: https://github.com/advisories/GHSA-jqhp-238x-qhgf