CVE-2026-70161

No fix known EPSS <1%CVSS 7.3

Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.

Published 2026-10-13 · CVE record · OSV

Products: Microsoft .NET 10.0 runtime, Microsoft .NET 11.0 runtime, Microsoft .NET 9.0 runtime, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.10

Distro releases