This vulnerability in Microsoft .NET 10.0 arises from improper input validation (CWE-20), which can be leveraged by an unauthorized local attacker to escalate privileges. The CVSS 3.1 vector indicates local attack vector with low attack complexity, no privileges required initially, but user interaction is needed. The impact includes high confidentiality and integrity loss and low availability impact. Microsoft has published an official fix to remediate this issue.

Successful exploitation allows a local attacker to elevate privileges, potentially gaining higher-level access than intended. This can lead to unauthorized access to sensitive data and modification of system components. The vulnerability affects confidentiality and integrity severely, with some impact on availability.

An official patch is available from Microsoft. Users and administrators should apply the update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35433 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor advisory.