CVE-2026-70165: .NET Elevation of Privilege Vulnerability
.NET Elevation of Privilege Vulnerability
Other sources
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 11.0.100-rc.2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 9.0.319, 9.0.122 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 18.10.4 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 17.14.42 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.402Patch KB5130036
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems running the listed Microsoft .NET versions on Windows, or the listed Visual Studio versions, are in scope. Exploitation is local rather than network-based.
What access does an attacker need?
An attacker must already be authorized on the affected system and must be able to perform local actions. Exploitation also requires user interaction and has high attack complexity.
What is the potential impact if exploitation succeeds?
A successful attack can elevate privileges and may result in high impact to confidentiality, integrity, and availability.