GHSA-387c-qmrw-59qv: Duplicate Advisory: Microsoft Security Advisory CVE-2026-26131 – .NET Elevation of Privilege Vulnerability

March 10, 2026 (updated March 11, 2026)

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-crjq-wm6x-6qx7. This link is maintained to preserve external references.

Original Description

Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally.

References

github.com/advisories/GHSA-387c-qmrw-59qv
github.com/dotnet/dotnet
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26131
nvd.nist.gov/vuln/detail/CVE-2026-26131

Code Behaviors & Features

Detect and mitigate GHSA-387c-qmrw-59qv with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →