.NET Elevation of Privilege Vulnerability

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-96231 · Microsoft / collected KEV context

EUVD-2026-100201

GHSA-2j93-m82w-73j2

cve-program · CVE-2026-96231

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96231

euvd · EUVD-2026-100201

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96231

nvd · CVE-2026-96231

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96231

osv · GHSA-2j93-m82w-73j2

• https://github.com/dotnet/runtime/security/advisories/GHSA-2j93-m82w-73j2
• https://github.com/dotnet/announcements/issues/479
• https://github.com/dotnet/runtime/issues/135707
• https://github.com/dotnet/runtime

• Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. · Advisory content revised · 7 Nov 2026
• Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. · Advisory content revised · 1 Nov 2026
• .NET Elevation of Privilege Vulnerability · Published vulnerability · 13 Oct 2026