Privilege Escalation

Microsoft.IO.Redist is vulnerable to Privilege Escalation. The vulnerability is due improper link resolution in the Visual Studio installer on Windows OS that allows an unprivileged user to manipulate the installation, leading to elevated SYSTEM level privileges...

Microsoft Security Advisory CVE-2024-38081 | .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2024-38081 | .NET Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0 . This advisory also provides guidance on what developers can do to update their...

Improper Link Resolution Before File Access ('Link Following')

Overview Affected versions of this package are vulnerable to Improper Link Resolution Before File Access 'Link Following' through the manipulation of the installation process on Windows OS. An unprivilaged attacker can elevate privileges by exploiting this vulnerability. Remediation Upgrade...