.NET Elevation of Privilege Vulnerability

Vulnerability

A vulnerability allowing improper authorization in .NET could enable an authorized attacker to locally elevate privileges. This issue affects .NET versions 8.0, 9.0, and 10.0, all installed on Windows.

Impact

Exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for .NET 10.0, 8.0, or 9.0 from the .NET download website. For guidance, refer to the Microsoft Knowledge Base articles 5097148, 5097149, or 5097150.

Added: Jun 9, 2026, 6:41 PM
Updated: Jun 9, 2026, 6:41 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
10.0
exploitability
3.3
remediation
7.7
relevance
9.6
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.