PT-2026-112266 · Microsoft · .Net 10.0+4

CVE-2026-70161

Published

2026-10-13

Updated

2026-10-13

CVSS v3.1

7.3

High

Vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.

Fix

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-70161

.Net 10.0

.Net 11.0

.Net 9.0

Visual Studio 2022 Version 17.14

Visual Studio 2026 Version 18.10