Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Microsoft Dot_net_framework | — | Apply update KB5120698 for Microsoft .NET Framework 3.5\4.7.2Apply update KB5120702 for Microsoft .NET Framework 4.8Apply update KB5120701 for Microsoft .NET Framework 3.5\4.8Apply update KB5120700 for Microsoft .NET Framework 4.6.2\4.7\4.7.1\4.7.2Apply update KB5120747 for Microsoft .NET Framework 3.5Apply update KB5120418 for Microsoft .NET Framework 3.5\4.6.2\4.7\4.7.1\4.7.2Apply update KB5120714 for Microsoft .NET Framework 3.5\4.8.1Apply update KB5120708 for Microsoft .NET Framework 3.5\4.8.1Apply update KB5120699 for Microsoft .NET Framework 4.6.2\4.7\4.7.1\4.7.2Apply update KB5120710 for Microsoft .NET Framework 3.5\4.8.1Apply update KB5120711 for Microsoft .NET Framework 4.8.1Apply update KB5120713 for Microsoft .NET Framework 3.5\4.8.1Apply update KB5120716 for Microsoft .NET Framework 3.5Apply update KB5120703 for Microsoft .NET Framework 3.5\4.8Apply update KB5120709 for Microsoft .NET Framework 3.5\4.8.1Apply update KB5120695 for Microsoft .NET Framework 3.5Apply update KB5120705 for Microsoft .NET Framework 3.5\4.8Apply update KB5120704 for Microsoft .NET Framework 4.8Apply update KB5120706 for Microsoft .NET Framework 4.8 | Aug 11, 2026 | Aug 11, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub