Executive brief
.NET is a core software development framework used across thousands of enterprise applications. This vulnerability allows an authorized user to escalate their privileges to higher levels of system access by exploiting a flaw that exposes sensitive security information. An attacker with initial local access could leverage this to gain administrative control of the system.
Technical details
This vulnerability is an information disclosure flaw in .NET that exposes sensitive data to an unauthorized actor, which can be chained with privilege escalation to grant higher privileges on the local system. The attack requires prior authorization or authenticated access to the system. The vulnerability allows a local authenticated attacker to read or access sensitive information that can bypass security protections and elevate privileges. No indication of patch availability is provided in the advisory.
Affected products
- Microsoft .NET
Timeline
- 2026-09-08: disclosed