Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-32177

Опубликовано: 18 мая 2026
Источник: msrc
CVSS3: 7.3
EPSS Низкий

Описание

.NET Elevation of Privilege Vulnerability

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

FAQ

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain ELEVATED privileges, which may allow them to perform actions beyond their original permissions.

According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), and integrity (I:H), and some loss of availability (A:L). What does that mean for this vulnerability?

An attacker who successfully exploited this vulnerability could view sensitive information (Confidentiality) and modify code in the repo, (Integrity), and they might be able to interfere with availability of the code (Availability).

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

Exploitation of this vulnerability requires that a user trigger the payload in the application.

According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), and integrity (I:H), and some loss of availability (A:L). What does that mean for this vulnerability?

An attacker who successfully exploited this vulnerability could view sensitive information such as other user's credentials (Confidentiality) and make changes to file contents on the target server (Integrity), and they might be able to force a crash (Availability).

Обновления

ПродуктСтатьяОбновление
.NET 8.0 installed on Windows
.NET 9.0 installed on Windows
Microsoft Visual Studio 2022 version 17.12
Microsoft Visual Studio 2022 version 17.14
.NET 10.0 installed on Windows
Microsoft Visual Studio 2026 version 18.5
Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems
Microsoft .NET Framework 4.8 on Windows Server 2016
Microsoft .NET Framework 4.8 on Windows Server 2012
Microsoft .NET Framework 4.8 on Windows Server 2012 R2

Показывать по

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

Exploitation Less Likely

EPSS

Процентиль: 43%
0.00551
Низкий

7.3 High

CVSS3

Связанные уязвимости

CVSS3: 7.3
ubuntu
3 месяца назад

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

CVSS3: 7.3
redhat
3 месяца назад

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

CVSS3: 7.3
nvd
3 месяца назад

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

CVSS3: 7.3
fstec
3 месяца назад

Уязвимость программной платформы .NET, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю повысить свои привилегии

CVSS3: 7.3
redos
около 2 месяцев назад

Уязвимость dotnet10.0

EPSS

Процентиль: 43%
0.00551
Низкий

7.3 High

CVSS3