CVE-2026-96225: .NET Elevation of Privilege Vulnerability

Overview

Severity
High (CVSS 7.8)
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Category
Elevation of Privilege
Exploit Status
Not Exploited
Exploitation Likelihood
Less Likely
Patch Tuesday
2026-Oct
Released
2026-10-13

Description

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

FAQ

What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain ROOT privileges.

Affected Products (10)

Developer Tools

  • .NET 8.0 installed on Mac OS
  • .NET 10.0 installed on Mac OS
  • .NET 11.0 installed on Linux
  • .NET 11.0 installed on Mac OS
  • .NET 9.0 installed on Mac OS
  • .NET 10.0 installed on Linux
  • .NET 8.0 installed on Linux
  • .NET 9.0 installed on Linux
  • Microsoft Visual Studio 2026 version 18.10
  • Microsoft Visual Studio 2022 version 17.14

Security Updates (4)

Acknowledgments

<a href="https://www.linkedin.com/in/đức-nguyễn-văn-minh-19a925287/">minhducnguyen03022002@gmail.com</a> with <a href="https://saigonnewport.com.vn/">Saigon Newport Corporation</a>, <a href="https://www.linkedin.com/in/stanley-t-62325394/">Stanley Tobias</a>, Attila.Cs(zerodaybugs.com) with https://zerodaybugs.com/, <a href="https://www.linkedin.com/in/kevin-sch/">Kevin Schmidt</a>, <a href="https://linkedin.com/in/weeraphat-srisutham">Weeraphat Srisutham</a>, <a href="https://x.com/ky0tofu">Ky0toFu</a>, <a href="https://www.linkedin.com/in/leandrosbatista21/">Leandro Batista</a>

Revision History

  • 2026-10-13: Information published.