Microsoft Security Advisory CVE-2026-71328

Advisories.Gitlab • September 10, 2026

Microsoft is releasing this security advisory to provide information a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

Microsoft.DiaSymReader.Native can perform an out of bounds write while processing MSFZ PDB files.

github.com /advisories/GHSA-63gh-g2x5-x69v

github.com /dotnet/runtime/security/advisories/GHSA-63gh-g2x5-x69v

msrc.microsoft.com /update-guide/vulnerability/CVE-2026-71328

nvd.nist.gov /vuln/detail/CVE-2026-71328

Code Behaviors & Features

Detect and mitigate CVE-2026-71328 with GitLab Dependency Scanning

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft .NET Vulnerability CVE-2026-71328 Disclosed Microsoft has published a security advisory for a critical vulnerability in Microsoft.DiaSymReader.Native, identified as CVE-2026-71328. This vulnerability allows for an out-of-bounds write while processing MSFZ PDB files, affecting any Microsoft .NET project that uses the impacted package versions. Developers are advised to update to version 18.9.0-beta1.26405.2 or later of the affected package. The vulnerability has a CVSS score of 7.5, indicating high severity, with potential impacts on confidentiality, integrity, and availability. Users are encouraged to report any security issues to the Microsoft Security Response Center. The advisory was published on September 8, 2026, and is currently available on GitHub and GitLab. 3 sources 57

Extracted Entities

Microsoft Security Advisory CVE-2026-71328

The full story

Extracted Entities

Companies (1)

CVEs (1)

CWE Weaknesses (1)

Domains (1)