๐Ÿ” CVE Alert

CVE-2026-35433

HIGH 7.3

.NET Elevation of Privilege Vulnerability

CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

Vendor microsoft
Product .net 10.0
Ecosystems
Industries
TechnologyEnterprise
Published May 12, 2026
Last Updated May 13, 2026
Stay Ahead of the Next One

Get instant alerts for microsoft .net 10.0

Be the first to know when new high vulnerabilities affecting microsoft .net 10.0 are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

Microsoft / .NET 10.0
10.0.0 < 10.0.8
Microsoft / .NET 8.0
8.0.0 < 8.0.27
Microsoft / .NET 9.0
9.0.0 < 9.0.16

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
msrc.microsoft.com: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35433