This vulnerability (CWE-36) in Microsoft .NET 10.0 arises from improper handling of specially crafted files, enabling an attacker with limited privileges to write arbitrary files and directories to certain locations on the affected system. Exploitation requires sending a crafted file to the vulnerable system. The vulnerability does not allow full control over file destinations. Microsoft has issued an official security update that corrects the file handling behavior to prevent exploitation.

Successful exploitation could lead to unauthorized modification of files and directories on the system, potentially impacting system integrity. There is no confidentiality or availability impact reported. The attacker requires some level of privileges (low complexity) and no user interaction is needed. No known exploits are currently in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft to ensure .NET 10.0 properly handles files and mitigates this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32175 for the update details and installation instructions.