high7.3
CVE-2026-70161
Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.
Impact
Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Microsoft Visual Studio 2022 Version 17.14 | from 17.14.0 before 17.14.42 |
| Microsoft | Microsoft Visual Studio 2026 Version 18.10 | from 18.10.0 before 18.10.4 |
| Microsoft | .NET 11.0 Runtime | from 11.0.0 before 11.0.100-rc.2 |
| Microsoft | .NET 9.0 Runtime | Version 9.0.0 <9.0.319, 9.0.122 |
| Microsoft | .NET 10.0 Runtime | from 10.0.0 before 10.0.402 |