Incorrect default permissions in Microsoft .NET 10.0 enable an attacker who already has authorized local access to increase their privileges. The flaw is mapped to CWE‑276, Incorrect Access Control. The result is that the attacker can perform actions reserved for higher‑privilege users, but the description does not specify broader consequences such as arbitrary code execution.

The vulnerability affects installations of Microsoft .NET 10.0. No sub‑version details are supplied, so any .NET 10.0 deployment may be vulnerable. Although the Common Platform Enumeration list mentions Linux kernel, the CVE description does not associate the flaw with Linux products.

The CVSS score of 7.8 indicates a high severity level, while the EPSS score of less than 1 percent suggests that exploitation is currently unlikely. The vulnerability is not included in the CISA KEV catalog, implying no widespread coordinated attacks are documented. A local attacker with legitimate access would need to exploit the incorrect permission setting to raise their privileges.