Dashboard / CVE-2026-70190

CVE-2026-70190

HIGH
MEDIUM Priority: 0.04 BB Relevance: 30/100
Published: 2026-10-13 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: Required
S: Unchanged
C: High
I: High
A: High

Description

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Weakness Classification (1)

Affected Software (15)

VendorProductVersion
Microsoft .NET 10.0 runtime 10.0.0 < 10.0.113
Microsoft .NET 10.0 runtime 10.0.0 < 10.0.113
Microsoft .NET 10.0 runtime 10.0.0 < 10.0.113
Microsoft .NET 11.0 runtime 11.0.0 < 11.0.100-rc.2
Microsoft .NET 11.0 runtime 11.0.0 < 11.0.100-rc.2
Microsoft .NET 11.0 runtime 11.0.0 < 11.0.100-rc.2
Microsoft .NET 9.0 runtime 9.0.0 < 9.0.319, 9.0.122
Microsoft .NET 9.0 runtime 9.0.0 < 9.0.319, 9.0.122
Microsoft .NET 9.0 runtime 9.0.0 < 9.0.319, 9.0.122
Microsoft Microsoft Visual Studio 2022 version 17.14 17.14.0 < 17.14.42
Microsoft Microsoft Visual Studio 2022 version 17.14 17.14.0 < 17.14.42
Microsoft Microsoft Visual Studio 2022 version 17.14 17.14.0 < 17.14.42
Microsoft Microsoft Visual Studio 2026 version 18.10 18.10.0 < 18.10.4
Microsoft Microsoft Visual Studio 2026 version 18.10 18.10.0 < 18.10.4
Microsoft Microsoft Visual Studio 2026 version 18.10 18.10.0 < 18.10.4

References & Advisories (1)

Bug Bounty Relevance

30 / 100
✓ Low complexity

CVSS Score

7.3 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

EPSS — Exploitation Probability

0.49%
Raw Score 0.004900
Percentile 42.1%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00490
2026-10-28
0.00490

Intelligence Sources

mitre ref →
nvd ref →

External Links