PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-70190 Microsoft CVE debrief

CVE-2026-70190 .NET Elevation of Privilege Vulnerability: Improper link resolution before file access in .NET allows an authorized attacker to elevate privileges locally. Affected versions include .NET 9.0, .NET 10.0, .NET 11.0, Microsoft Visual Studio 2022 version 17.14, and Microsoft Visual Studio 2026 version 18.10. This vulnerability allows attackers with local access to exploit improper link resolution, potentially leading to unauthorized privilege escalation. Defenders should prioritize verifying affected .NET and Visual Studio versions, applying patches, and monitoring for local privilege escalation attempts to mitigate potential risks.

Vendor
Microsoft
Product
.NET 10.0
CVSS
HIGH 7.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-13
Original CVE updated
2026-10-13
Advisory published
2026-10-13
Advisory updated
2026-10-13

Who should care

Defenders responsible for .NET and Visual Studio deployments should assess exposure and apply patches to prevent local privilege escalation.

Why it matters

CVE-2026-70190 is a .NET Elevation of Privilege Vulnerability that allows authorized attackers to elevate privileges locally due to improper link resolution before file access. Defenders should prioritize verifying affected versions, applying patches, and monitoring for local privilege escalation attempts.

  • Verify and patch affected .NET and Visual Studio versions to prevent exploitation
  • Monitor for local privilege escalation attempts to detect potential attacks
  • Inventory and update affected systems to ensure comprehensive coverage

Technical summary

The .NET Elevation of Privilege Vulnerability (CVE-2026-70190) occurs due to improper link resolution before file access in .NET. This allows an authorized attacker to elevate privileges locally. Affected products include .NET 9.0, .NET 10.0, .NET 11.0, Microsoft Visual Studio 2022 version 17.14, and Microsoft Visual Studio 2026 version 18.10.

Defensive priority

Defenders should prioritize verifying affected .NET and Visual Studio versions, applying patches, and monitoring for local privilege escalation attempts.

Recommended defensive actions

  • Verify and apply patches for affected .NET and Visual Studio versions
  • Monitor for local privilege escalation attempts
  • Inventory and update affected systems

Evidence notes

The CVE record and source item provide details on affected versions and vendor advisories. However, additional information on exploitation and impact is limited.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-70190 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-70190

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-70190 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-70190

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • .NET Elevation of Privilege Vulnerability

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/70xxx/CVE-2026-70190.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70190

    Supplemental source - vendor-advisory, patch

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.