CyberICT

CVE-2026-70183

Microsoft · Published October 13, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

ASP.NET Core Elevation of Privilege Vulnerability. Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Affected Products

  • Microsoft Visual Studio 2022 version 17.14
  • ASP.NET Core 10.0
  • ASP.NET Core 8.0
  • ASP.NET Core 9.0

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C