Product:
.NET
Summary
Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally. This vulnerability can lead to significant security risks if exploited. Attackers with local access can gain higher privileges than intended, potentially compromising the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-26131 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system. By leveraging the incorrect default permissions, the attacker can execute malicious actions that elevate their privileges. This can be done without requiring any user interaction, making it a low-complexity attack.
Affected Products
- .NET: Affected by incorrect default permissions allowing privilege escalation.
Mitigation
To mitigate this vulnerability, it is essential to review and adjust the default permissions in .NET. Ensuring that only authorized users have the necessary privileges can help prevent exploitation. Regular updates and security patches should also be applied to maintain system integrity.