This vulnerability is a heap-based buffer overflow in Microsoft .NET 10.0 that enables an unauthorized attacker with local access to elevate privileges. The issue affects .NET running on Windows systems and can lead to arbitrary code execution by overwriting memory, including function pointers. The vulnerability is tracked as CVE-2026-32177 and has a CVSS 3.1 base score of 7.3, indicating high severity. Microsoft has issued an official fix to address this flaw. Red Hat has confirmed their products are not affected by this issue.

An attacker with local access and low privileges can exploit this heap-based buffer overflow to elevate their privileges on the affected system. The impact includes potential arbitrary code execution with elevated privileges, compromising confidentiality, integrity, and availability. The vulnerability does not require user interaction but requires local access. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users should apply the security update provided by Microsoft to remediate this vulnerability. Red Hat products are not affected, and no additional mitigations are identified for this issue. Users should follow vendor guidance and update affected .NET 10.0 installations promptly.