PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-70161 Microsoft CVE debrief

A .NET Elevation of Privilege Vulnerability exists due to improper limitation of a pathname to a restricted directory, allowing an authorized attacker to elevate privileges locally. This vulnerability affects multiple .NET and Microsoft Visual Studio versions. The vulnerability is caused by a path traversal issue in .NET, which enables an attacker to access restricted directories. Affected products include .NET 9.0, .NET 10.0, .NET 11.0, Microsoft Visual Studio 2022 version 17.14, and Microsoft Visual Studio 2026 version 18.10. Defenders should assess exposure and prioritize patching to prevent local privilege escalation. The CVE Program record and NVD vulnerability detail provide

Vendor
Microsoft
Product
.NET 10.0
CVSS
HIGH 7.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-13
Original CVE updated
2026-10-13
Advisory published
2026-10-13
Advisory updated
2026-10-13

Who should care

Defenders responsible for .NET and Microsoft Visual Studio deployments should assess exposure and prioritize patching to prevent local privilege escalation.

Why it matters

CVE-2026-70161 is a .NET Elevation of Privilege Vulnerability that allows an authorized attacker to elevate privileges locally due to improper limitation of a pathname to a restricted directory. Defenders responsible for .NET and Microsoft Visual Studio deployments should assess exposure and prioritize patching to prevent local privilege escalation.

  • Local privilege escalation is possible, allowing attackers to gain elevated privileges.
  • Affected .NET and Microsoft Visual Studio versions require patching to prevent exploitation.
  • Verification of affected versions and application of patches or updates is necessary.
  • Monitoring systems for potential exploitation attempts is recommended.

Technical summary

The vulnerability exists due to improper limitation of a pathname to a restricted directory ('path traversal') in .NET, allowing an authorized attacker to elevate privileges locally. Affected products include .NET 9.0, .NET 10.0, .NET 11.0, Microsoft Visual Studio 2022 version 17.14, and Microsoft Visual Studio 2026 version 18.10.

Defensive priority

Defenders should prioritize patching affected .NET and Microsoft Visual Studio versions to prevent local privilege escalation.

Recommended defensive actions

  • Patch affected .NET 9.0, .NET 10.0, .NET 11.0, Microsoft Visual Studio 2022 version 17.14, and Microsoft Visual Studio 2026 version 18.10 versions.
  • Verify affected versions and apply patches or updates.
  • Monitor systems for potential exploitation attempts.

Evidence notes

The CVE Program record and NVD vulnerability detail provide information on the vulnerability, its CVSS score, and affected products. The vulnerability exists due to improper limitation of a pathname to a restricted directory ('path traversal') in .NET, allowing an authorized attacker to elevate privileges locally. Affected products include .NET 9.0, .NET 10.0, .NET 11.0, Microsoft Visual Studio 2022 version 17.14, and Microsoft Visual Studio 2026 version 18.10. The source item provides

Sources and references

Verified primary and authoritative sources

  • CVE-2026-70161 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-70161

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-70161 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-70161

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • .NET Elevation of Privilege Vulnerability

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/70xxx/CVE-2026-70161.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70161

    Supplemental source - vendor-advisory, patch

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.