.NET Elevation of Privilege Vulnerability

Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A CVE-2026-114155 · score 7.5/10

What could go wrong?

Someone who already has a normal account could give themselves full admin rights.

How urgent is it?

Check Microsoft’s page for details.

Who is affected?

Microsoft.DotNet.HotReload.Watch.Aspire on Linux, Microsoft.DotNet.HotReload.Watch.Aspire on Mac OS, .NET 10.0 installed on Linux, .NET 10.0 installed on Mac OS, .NET 11.0 installed on Linux, .NET 11.0 installed on Mac OS

What should I do?

Install this month’s updates via Windows Update, Intune or your update tool, then restart.

Known problems

Microsoft lists known issues per update: KB5135241. Official page.