Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
{ "severity": "High", "cpes": [ "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*" ] }