CVE-2026-70165

No fix known EPSS <1%CVSS 6.7

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Published 2026-10-13 · CVE record · OSV

Products: Microsoft .NET 10.0 runtime, Microsoft .NET 11.0 runtime, Microsoft .NET 9.0 runtime, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.10

Distro releases