Nov 2026: .NET Elevation of Privilege Vulnerability
CVE-2026-105544 Published on November 10, 2026

.NET Elevation of Privilege Vulnerability
Improper access control in .NET allows an authorized attacker to elevate privileges locally.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL

Weakness Type

External Control of System or Configuration Setting

One or more system settings or configuration elements can be externally controlled by a user. Allowing external control of system settings can disrupt service or cause an application to behave in unexpected, and potentially malicious ways.


Products Associated with CVE-2026-105544

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Affected Versions

Microsoft .NET 10.0 installed on Linux: Microsoft .NET 10.0 installed on Mac OS: Microsoft .NET 10.0 installed on Windows: Microsoft .NET 11.0 installed on Linux: Microsoft .NET 11.0 installed on Mac OS: Microsoft .NET 11.0 installed on Windows: Microsoft .NET 8.0 installed on Linux: Microsoft .NET 8.0 installed on Mac OS: Microsoft .NET 8.0 installed on Windows: Microsoft .NET 9.0 installed on Linux: Microsoft .NET 9.0 installed on Mac OS: Microsoft .NET 9.0 installed on Windows: Microsoft Visual Studio 2022 version 17.14: Microsoft Visual Studio 2026 version 18.11: Microsoft Visual Studio 2026 version 18.12: Microsoft.TestPlatform.CLI:

Exploit Probability

EPSS
0.31%
Percentile
23.94%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.