{"id":"EUVD-2026-29634","revision":"e1942c51eb80486da3e02e9802e4c06e","records":[{"revision":"e1942c51eb80486da3e02e9802e4c06e","observedAt":"2026-11-03T07:03:42.21+00:00","statement":{"source":"euvd","id":"EUVD-2026-29634","aliases":["CVE-2026-35433","GHSA-8x9c-mqxv-q2pp"],"title":"Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.","description":"Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C","score":7.3,"severity":null}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35433"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-29634","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"May 12, 2026, 4:58:34 PM","dateUpdated":"Aug 10, 2026, 3:14:00 PM"},"relatedAdvisories":[{"id":"NCSC-2026-0143","title":"Kwetsbaarheden verholpen in Microsoft Developer Tools","vulnerabilityIds":["CVE-2026-32177","CVE-2026-35433","CVE-2026-32175","CVE-2026-42899","CVE-2026-41094","CVE-2026-41109","CVE-2026-41610","CVE-2026-41611","CVE-2026-41612","CVE-2026-41613","CVE-2026-42826"]},{"id":"msrc_CVE-2026-35433","title":".NET Elevation of Privilege Vulnerability","vulnerabilityIds":["CVE-2026-35433"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-29634","identifiers":["EUVD-2026-29634","CVE-2026-35433","GHSA-8x9c-mqxv-q2pp"]},"retained":false,"historicalAffected":[]}],"coverage":[]}