Description
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft .NET 10.0
10.0.0 to < 10.0.12affected
Microsoft .NET 11.0
11.0.0 to < 11.0 RC1affected
Microsoft .NET 9.0
9.0.0 to < 9.0.20affected
Microsoft Microsoft Visual Studio 2022 version 17.14
17.14.0 to < 17.14.40affected
Microsoft Microsoft Visual Studio 2026 version 18.9
18.9.0 to < 18.9.3affected