Heap-based buffer overflow in the .NET runtime allows an unauthorized local user to elevate privileges. The overflow results from missing bounds checking (CWE-190) and inadequate input validation (CWE-20), enabling the attacker to gain higher process rights. By exploiting the vulnerability the attacker could raise privileges to full system rights, potentially compromising data confidentiality, integrity, or system availability.

Microsoft .NET 3.5, Microsoft .NET 3.5 and 4.7.2, Microsoft .NET 3.5 and 4.8, Microsoft .NET 3.5 and 4.8.1, Microsoft .NET 4.8, Microsoft .NET 8.0, Microsoft .NET 9.0, and Microsoft .NET 10.0 are affected. Applications built on these framework versions run the vulnerable runtime and could be compromised by local attackers if the runtime is not updated.

The CVSS score of 7.3 indicates a moderate to high severity. The EPSS score of less than 1% suggests a low but non-zero probability of exploitation, while local privilege escalation remains plausible. The vulnerability is not currently in CISA KEV, so no known public exploits have been documented. Exploitation requires local access; an attacker with limited local privileges can trigger the misuse of input validation to elevate their privileges to full system rights.