medium6.7
CVE-2026-70165
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Impact
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | .NET 10.0 Runtime | from 10.0.0 before 10.0.402 |
| Microsoft | .NET 11.0 Runtime | from 11.0.0 before 11.0.100-rc.2 |
| Microsoft | Microsoft Visual Studio 2026 Version 18.10 | from 18.10.0 before 18.10.4 |
| Microsoft | Microsoft Visual Studio 2022 Version 17.14 | from 17.14.0 before 17.14.42 |
| Microsoft | .NET 9.0 Runtime | Version 9.0.0 <9.0.319, 9.0.122 |