Description
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Published: 2026-10-13
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Elevation of Privilege (Local)
Action: Immediate Patch
AI Analysis

Impact

The flaw is an improper link resolution before file access in .NET, allowing an authorized attacker to elevate privileges locally. This is an elevation of privilege vulnerability categorized as CWE-59, which can grant higher local rights by following symbolic or hard links during file operations.

Affected Systems

Affected products include Microsoft .NET versions 10.0, 11.0, 8.0, and 9.0, as well as Microsoft Visual Studio 2022 version 17.14 and Microsoft Visual Studio 2026 version 18.10. No additional sub‑versions are listed.

Risk and Exploitability

The CVSS score of 7.8 indicates a high severity with a local attack vector. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting no known widespread exploitation yet. An attacker who already authenticates to the affected system can exploit the flaw by manipulating link resolution to gain elevated local privileges. The vulnerability requires local or user‑authenticated access and does not appear to be exploitable remotely. Consequently, the risk is significant for systems where users run .NET applications with elevated privileges.

Generated by OpenCVE AI on October 14, 2026 at 10:44 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest Microsoft .NET security update that addresses the link resolution flaw, as documented at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96225.
  • If an update cannot be applied immediately, restrict the ability of local users to create or modify symbolic links within application directories to limit the attack surface.
  • Ensure that all applications run under the principle of least privilege, avoiding running with unnecessary local administrator rights.

Generated by OpenCVE AI on October 14, 2026 at 10:44 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-w6wh-p4g7-mpj2 Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability
History

Tue, 20 Oct 2026 00:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Important

Wed, 14 Oct 2026 00:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 19:15:00 +0000

Type Values Removed Values Added
Description Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Title .NET Elevation of Privilege Vulnerability
First Time appeared Microsoft
Microsoft .net
Microsoft microsoft Visual Studio 2026 Version 18.10
Microsoft visual Studio 2022
Weaknesses CWE-59
CPEs cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.10:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft .net
Microsoft microsoft Visual Studio 2026 Version 18.10
Microsoft visual Studio 2022
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}

Subscriptions

Microsoft .net Microsoft Visual Studio 2026 Version 18.10 Visual Studio 2022
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2026-10-31T18:11:04.179Z

Reserved: 2026-09-22T18:57:22.167Z

Link: CVE-2026-96225

cve-icon Vulnrichment

Updated: 2026-10-13T19:47:03.399Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-13T19:21:48.480

Modified: 2026-10-22T22:19:55.583

Link: CVE-2026-96225

cve-icon Redhat

Severity : Important

Publid Date: 2026-10-13T17:00:00Z

Links: CVE-2026-96225 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-14T10:45:14Z

Weaknesses
  • CWE-59

    Improper Link Resolution Before File Access ('Link Following')