Dashboard / CVE-2026-70165

CVE-2026-70165

MEDIUM
MEDIUM Priority: 0.03 BB Relevance: 18/100
Published: 2026-10-13 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: High
PR: Low
UI: Required
S: Unchanged
C: High
I: High
A: High

Description

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
Microsoft .NET 10.0 runtime 10.0.0 < 10.0.402

References & Advisories (1)

Bug Bounty Relevance

18 / 100

CVSS Score

6.7 / 10.0 v3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

EPSS — Exploitation Probability

0.38%
Raw Score 0.003750
Percentile 31.4%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00375
2026-10-28
0.00375

Intelligence Sources

mitre ref →
nvd ref →

External Links