coldbraid

CVE-2026-114157 Microsoft .NET 10.0 Installed On Windows

Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges locally.

CVSS
7.5 High
EPSS
0.3%
Percentile
16
Published
2026-11-10
Force
5 of 12

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-362

In the news