{"affected":[{"product":".NET 10.0 installed on Linux","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"10.0.404","status":"affected","version":"10.0.0","versionType":"custom"}]},{"product":".NET 10.0 installed on Mac OS","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"10.0.404","status":"affected","version":"10.0.0","versionType":"custom"}]},{"product":".NET 10.0 installed on Windows","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"10.0.404","status":"affected","version":"10.0.0","versionType":"custom"}]},{"product":".NET 11.0 installed on Linux","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"11.0.100","status":"affected","version":"11.0.0-preview.1","versionType":"custom"}]},{"product":".NET 11.0 installed on Mac OS","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"11.0.100","status":"affected","version":"11.0.0-preview.1","versionType":"custom"}]},{"product":".NET 11.0 installed on Windows","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"11.0.100","status":"affected","version":"11.0.0-preview.1","versionType":"custom"}]},{"product":".NET 8.0 installed on Linux","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"8.0.428","status":"affected","version":"8.0.0","versionType":"custom"}]},{"product":".NET 8.0 installed on Mac OS","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"8.0.428","status":"affected","version":"8.0.0","versionType":"custom"}]},{"product":".NET 8.0 installed on Windows","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"8.0.428","status":"affected","version":"8.0.0","versionType":"custom"}]},{"product":".NET 9.0 installed on Linux","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"9.0.321","status":"affected","version":"9.0.0","versionType":"custom"}]},{"product":".NET 9.0 installed on Mac OS","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"9.0.321","status":"affected","version":"9.0.0","versionType":"custom"}]},{"product":".NET 9.0 installed on Windows","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"9.0.321","status":"affected","version":"9.0.0","versionType":"custom"}]},{"product":"Microsoft Visual Studio 2022 version 17.14","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"17.14.45","status":"affected","version":"17.14.0","versionType":"custom"}]},{"product":"Microsoft Visual Studio 2026 version 18.11","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"18.11.4","status":"affected","version":"18.11.0","versionType":"custom"}]},{"product":"Microsoft Visual Studio 2026 version 18.12","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"18.12.0","status":"affected","version":"18.12.0","versionType":"custom"}]},{"product":"Microsoft.TestPlatform.CLI","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"18.11.1","status":"affected","version":"17.2.0","versionType":"custom"}]}],"cveId":"CVE-2026-105544","cwes":["CWE-15"],"description":"Improper access control in .NET allows an authorized attacker to elevate privileges locally.","epss":{"date":"2026-11-12","percentile":0.27389,"score":0.00336},"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"CNA: microsoft","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},{"score":7.5,"severity":"high","source":"NVD: secure@microsoft.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794570724490,"publishedAt":1794334512518,"references":[{"source":"CNA: microsoft","tags":["vendor-advisory","patch"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105544"},{"source":"secure@microsoft.com","tags":[],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105544"}],"remediation":[{"kind":"fix","source":"CNA: microsoft","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105544"}],"revision":"f039239e7a4ff063269ad95a384048ae47e0689c07c2b7791847689ece8bf77b","sources":[{"modifiedAt":1794570724490,"name":"CNA: microsoft","retrievedAt":1794571699326,"url":"https://www.cve.org/CVERecord?id=CVE-2026-105544"},{"modifiedAt":1794399500923,"name":"NVD","retrievedAt":1794420988398,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105544"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794499844781,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-105544"}],"ssvc":{"assessedAt":1794344765419,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":".NET Elevation of Privilege Vulnerability","updatedAt":1794571699326}