CyberICT

CVE-2026-70190

Microsoft · Published October 13, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

.NET Elevation of Privilege Vulnerability. Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Affected Products

  • .NET 9.0 installed on Windows
  • .NET 10.0 installed on Windows
  • Microsoft Visual Studio 2026 version 18.10
  • Microsoft Visual Studio 2022 version 17.14

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C