This vulnerability (CVE-2026-65810) in Microsoft .NET Framework 3.5 is a relative path traversal flaw (CWE-23) that enables an unauthorized attacker to perform local privilege escalation. The attacker must have local access and user interaction is required. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with high impact on confidentiality, integrity, and availability. Microsoft has published an official fix to address this issue.

An attacker with local access can exploit this relative path traversal vulnerability to elevate their privileges on the affected system, potentially gaining higher-level access than intended. This can lead to full compromise of the affected system's confidentiality, integrity, and availability.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for .NET Framework 3.5 as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65810 to remediate this vulnerability.