{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/runtime/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":[".NET","ASP.NET"],"_cs_severities":["medium"],"_cs_tags":["vulnerability","privilege-escalation","runtime"],"_cs_type":"advisory","_cs_vendors":["Microsoft"],"content_html":"\u003cp\u003eMicrosoft has disclosed a security vulnerability affecting .NET and ASP.NET runtimes. The vulnerability enables a local attacker to successfully perform privilege escalation, resulting in the acquisition of elevated system-level permissions. Details regarding the exploitation vector remain limited in the public advisory.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a local attacker to escalate privileges to the highest level of system access on the affected host, potentially granting full control over the operating system or application environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAudit all systems for installed versions of Microsoft .NET and ASP.NET runtimes.\u003c/li\u003e\n\u003cli\u003eApply the latest security updates provided by Microsoft to mitigate the escalation path.\u003c/li\u003e\n\u003cli\u003eMonitor local system logs for unauthorized attempts to escalate privileges or unexpected process executions with SYSTEM or root identity.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-26T19:11:52Z","date_published":"2026-10-26T19:11:52Z","id":"https://feed.craftedsignal.io/briefs/2026-10-microsoft-dotnet-privilege-escalation/","summary":"A local privilege escalation vulnerability in Microsoft .NET and ASP.NET allows a local attacker to obtain the highest level of system privileges.","title":"Microsoft .NET and ASP.NET: Privilege escalation vulnerability","url":"https://feed.craftedsignal.io/briefs/2026-10-microsoft-dotnet-privilege-escalation/"}],"language":"en","title":"CraftedSignal Threat Feed - Runtime","version":"https://jsonfeed.org/version/1.1"}