What is the CVSS score of CVE-2026-65810?

CVE-2026-65810 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of .NET Framework are affected by CVE-2026-65810?

CVE-2026-65810 is a local privilege escalation vulnerability in Microsoft .NET Framework with no public exploit identified at time of analysis; however, it allows unprivileged Windows users to gain…. A patch is available.

How to fix or mitigate CVE-2026-65810?

Within 24 hours: Identify all Windows systems running Microsoft .NET Framework and restrict local user logon capabilities through Active Directory Group Policy and OS-level security policy; audit current local access grants for necessity. Within 7 days: Enable enhanced audit logging on all .NET Framework systems to detect privilege escalation attempts, configure Windows Event Viewer alerts for suspicious process creation and file system activity, and brief security operations on detection indicators specific to CVE-2026-65810. Within 30 days: Contact Microsoft support for patch availability and expected release timeline; in parallel, evaluate application whitelisting and privilege access management (PAM) solutions for production .NET systems; document and execute immediate patching procedures for deployment once vendor fix becomes available.

.NET Framework CVE-2026-65810

EUVD-2026-56745 HIGH

Relative Path Traversal (CWE-23)

2026-08-11 secure@microsoft.com

GHSA-59jx-wqfr-2938

Path Traversal Microsoft Red Hat Net Framework

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

ENISA EUVD

HIGH

qualitative

vuln.today AI

7.8 HIGH

Local vector confirmed by description; PR:N is consistent with unprivileged user exploitation; UI:R reflects required triggering action; full C/I/A impact aligns with privilege escalation to system level.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Red Hat

7.8 HIGH

qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Aug 11, 2026 - 18:19 EUVD

Analysis Generated

Aug 11, 2026 - 18:17 vuln.today

CVE Published

Aug 11, 2026 - 17:19 nvd

HIGH 7.8

DescriptionNVD

Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.

AnalysisAI

Local privilege escalation in Microsoft .NET Framework exploits a relative path traversal flaw (CWE-23), enabling an unprivileged local user to gain elevated system rights through user interaction. The vulnerability affects .NET Framework on Windows and is rated CVSS 7.8 (High), with full confidentiality, integrity, and availability impact upon successful exploitation. No public exploit code or CISA KEV listing has been identified at time of analysis.

Technical ContextAI

.NET Framework is Microsoft's managed runtime and class library platform, widely deployed across Windows enterprise environments for running applications targeting the Common Language Runtime (CLR). CWE-23 (Relative Path Traversal) describes a failure to properly neutralize sequences such as '../' in file path construction, allowing an attacker to reference files or directories outside the intended scope. In the context of a privilege escalation, the traversal likely allows a low-privileged process to write to or read from a restricted system path - for example, a privileged service directory or system configuration location - that then gets acted upon by a higher-privileged process or service. The CVSS vector (AV:L/AC:L/PR:N/UI:R) indicates the attack is local, requires no prior privileges, has low complexity, but does require some form of user interaction, consistent with a scenario involving a crafted file or application invocation.

RemediationAI

The primary remediation is to apply Microsoft's official patch distributed via Windows Update or the Microsoft Update Catalog, as referenced at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65810. The exact patched version of .NET Framework was not independently confirmed in the available data - consult the MSRC advisory directly to identify the specific KB article and .NET Framework version that resolves CVE-2026-65810. As a compensating control where patching is not immediately feasible, restrict local logon rights to sensitive systems (terminal servers, build servers, administrator workstations) to reduce the pool of users who could trigger exploitation. AppLocker or Windows Defender Application Control (WDAC) policies that limit which executables can run under standard user accounts may reduce the attack surface, though they do not eliminate the vulnerability. Note that these controls add management overhead and may impact developer workflows on build systems.