Nov 2026: .NET Elevation of Privilege Vulnerability
CVE-2026-105544 Published on November 10, 2026
.NET Elevation of Privilege Vulnerability
Improper access control in .NET allows an authorized attacker to elevate privileges locally.
Vulnerability Analysis
Weakness Type
External Control of System or Configuration Setting
One or more system settings or configuration elements can be externally controlled by a user. Allowing external control of system settings can disrupt service or cause an application to behave in unexpected, and potentially malicious ways.
Products Associated with CVE-2026-105544
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.