Authenticated privilege escalation over network

Incorrect authorization in Microsoft .NET Framework allows remote authenticated users to gain elevated privileges over a network. Microsoft's public advisories identify CWE-863 but do not disclose the specific authorization check, affected component, or request path that accepts insufficiently authorized actions. Exploitation requires valid low-privilege access and network reachability to a vulnerable .NET Framework application or service, and the published impact spans unauthorized read, write, and service-control actions within the vulnerable component.