This vulnerability, tracked as CVE-2026-70354 and classified under CWE-787 (Out-of-bounds Write), affects Microsoft .NET version 10.0. It allows an unauthorized attacker to perform local code execution by exploiting an out-of-bounds write condition. The CVSS 3.1 vector indicates the attack requires local access with low attack complexity, no privileges, and user interaction. The impact includes high confidentiality, integrity, and availability consequences. Microsoft has released an official fix for this vulnerability as documented in their security advisory.

Successful exploitation of this vulnerability can lead to local code execution by an unauthorized attacker, resulting in full compromise of confidentiality, integrity, and availability of the affected system. This could allow the attacker to run arbitrary code with the privileges of the user executing the .NET application.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70354 to remediate this vulnerability. No additional mitigation steps are required beyond applying the official patch.