ASP.NET Core Security Feature Bypass Vulnerability

Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely CVE-2026-114157 · score 7.5/10

What could go wrong?

Someone who already has a normal account could give themselves full admin rights.

How urgent is it?

Check Microsoft’s page for details.

Who is affected?

.NET 8.0 installed on Windows, .NET 9.0 installed on Windows, .NET 10.0 installed on Windows, .NET 11.0 installed on Windows, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.11, Microsoft Visual Studio 2026 version 18.12

What should I do?

Install this month’s updates via Windows Update, Intune or your update tool, then restart.

Known problems

Microsoft lists known issues per update: KB5135243, KB5135242, KB5135241. Official page.