This vulnerability in Microsoft .NET 10.0 involves improper input validation and an integer overflow that can be exploited by an unauthenticated local attacker to elevate privileges. The CVSS v3.1 score is 7.3 (high), with low attack complexity and low privileges required. The scope is unchanged, and the impact includes high confidentiality and integrity compromise with low availability impact. Microsoft has released an official fix for this vulnerability. Red Hat has confirmed that their products are not affected. The vulnerability is documented in the Microsoft Security Response Center advisory and the Red Hat advisory, which recommends updating the affected package promptly.

An attacker with local access can exploit improper input validation and integer overflow in .NET 10.0 to elevate privileges, potentially leading to unauthorized access to sensitive data and modification of system state. The vulnerability impacts confidentiality and integrity at a high level, with a low impact on availability. No active exploitation has been reported to date.

An official fix is available from Microsoft and should be applied promptly to affected systems running .NET 10.0. Red Hat products are not affected by this vulnerability. No practical mitigations beyond patching have been identified. Users should follow the Microsoft advisory for update instructions.