{"schema_version":"2","view":"grouped","data":[{"id":61633,"cve_ids":["CVE-2026-69304"],"payload":{"kind":"advisory","title":"ASP.NET Core Denial of Service Vulnerability","summary":"Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-69304","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"ASP.NET Core 10.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"ASP.NET Core 11.0","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"ASP.NET Core 8.0","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"ASP.NET Core 9.0","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-69304","aliases":["CVE-2026-69304"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":5.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.31","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"ASP.NET Core 10.0","versions":[{"status":"affected","version":"10.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":"ASP.NET Core 11.0","versions":[{"status":"affected","version":"11.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":"ASP.NET Core 8.0","versions":[{"status":"affected","version":"8.0","lessThan":"8.0.31","versionType":"custom"}]},{"vendor":"Microsoft","product":"ASP.NET Core 9.0","versions":[{"status":"affected","version":"9.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:13:13.568Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69304"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-69304","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-08T19:33:58.502592Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-08T19:34:17.319Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:13:13.568Z"}}},"related_cves":[{"value":"CVE-2026-69304","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:8edf7611-3d3c-426b-969e-8bb949c49632","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-69304","metrics":[],"products":[{"name":{"value":"aspnet-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.28","evidence":"/affected/0/ranges"},{"value":"9.0.17","evidence":"/affected/0/ranges"},{"value":"10.0.9","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-aspnet-core-2026-69304","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69304","metrics":[],"products":[{"name":{"value":"dotnet","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.31","evidence":"/affected/0/ranges"},{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-2026-69304","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69304","metrics":[],"products":[{"name":{"value":"dotnet-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.31","evidence":"/affected/0/ranges"},{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-sdk-2026-69304","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":4,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-69304","advisory_id":"8edf7611-3d3c-426b-969e-8bb949c49632","event_types":["advisory"],"published_at":"2026-10-25T18:52:59.887768+00:00","technologies":["asp-net-core-10-0","asp-net-core-11-0","asp-net-core-8-0","asp-net-core-9-0","core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-08T17:17:47.686+00:00","detail_url":"/advisories/advisory%3A8edf7611-3d3c-426b-969e-8bb949c49632","group":{"id":"advisory:8edf7611-3d3c-426b-969e-8bb949c49632","revision":1,"primary_event_id":60881,"change":"published","superseded_by":[],"changed":{"id":60881,"cve_ids":["CVE-2026-69304"],"payload":{"kind":"advisory","title":"ASP.NET Core Denial of Service Vulnerability","summary":"Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-69304","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"ASP.NET Core 10.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"ASP.NET Core 11.0","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"ASP.NET Core 8.0","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"ASP.NET Core 9.0","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-69304","aliases":["CVE-2026-69304"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":5.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.31","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"ASP.NET Core 10.0","versions":[{"status":"affected","version":"10.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":"ASP.NET Core 11.0","versions":[{"status":"affected","version":"11.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":"ASP.NET Core 8.0","versions":[{"status":"affected","version":"8.0","lessThan":"8.0.31","versionType":"custom"}]},{"vendor":"Microsoft","product":"ASP.NET Core 9.0","versions":[{"status":"affected","version":"9.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:13:13.568Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69304"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-69304","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-08T19:33:58.502592Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-08T19:34:17.319Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:13:13.568Z"}}},"related_cves":[{"value":"CVE-2026-69304","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:8edf7611-3d3c-426b-969e-8bb949c49632","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-69304","metrics":[],"products":[{"name":{"value":"aspnet-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.28","evidence":"/affected/0/ranges"},{"value":"9.0.17","evidence":"/affected/0/ranges"},{"value":"10.0.9","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-aspnet-core-2026-69304","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69304","metrics":[],"products":[{"name":{"value":"dotnet","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.31","evidence":"/affected/0/ranges"},{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-2026-69304","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69304","metrics":[],"products":[{"name":{"value":"dotnet-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.31","evidence":"/affected/0/ranges"},{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-sdk-2026-69304","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":4,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-69304","advisory_id":"8edf7611-3d3c-426b-969e-8bb949c49632","event_types":["advisory"],"published_at":"2026-10-25T18:52:59.887768+00:00","technologies":["asp-net-core-10-0","asp-net-core-11-0","asp-net-core-8-0","asp-net-core-9-0","core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-8-0","net-9-0"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-08T17:17:47.686+00:00","detail_url":"/events/60881"},"members":[{"id":60881,"cve_ids":["CVE-2026-69304"],"payload":{"kind":"advisory","title":"ASP.NET Core Denial of Service Vulnerability","summary":"Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-69304","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"ASP.NET Core 10.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"ASP.NET Core 11.0","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"ASP.NET Core 8.0","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"ASP.NET Core 9.0","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-69304","aliases":["CVE-2026-69304"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":5.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.31","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"ASP.NET Core 10.0","versions":[{"status":"affected","version":"10.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":"ASP.NET Core 11.0","versions":[{"status":"affected","version":"11.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":"ASP.NET Core 8.0","versions":[{"status":"affected","version":"8.0","lessThan":"8.0.31","versionType":"custom"}]},{"vendor":"Microsoft","product":"ASP.NET Core 9.0","versions":[{"status":"affected","version":"9.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:13:13.568Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69304"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-69304","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-08T19:33:58.502592Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-08T19:34:17.319Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:13:13.568Z"}}},"related_cves":[{"value":"CVE-2026-69304","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:8edf7611-3d3c-426b-969e-8bb949c49632","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-69304","metrics":[],"products":[{"name":{"value":"aspnet-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.28","evidence":"/affected/0/ranges"},{"value":"9.0.17","evidence":"/affected/0/ranges"},{"value":"10.0.9","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-aspnet-core-2026-69304","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69304","metrics":[],"products":[{"name":{"value":"dotnet","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.31","evidence":"/affected/0/ranges"},{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-2026-69304","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69304","metrics":[],"products":[{"name":{"value":"dotnet-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.31","evidence":"/affected/0/ranges"},{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-sdk-2026-69304","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":4,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-69304","advisory_id":"8edf7611-3d3c-426b-969e-8bb949c49632","event_types":["advisory"],"published_at":"2026-10-25T18:52:59.887768+00:00","technologies":["asp-net-core-10-0","asp-net-core-11-0","asp-net-core-8-0","asp-net-core-9-0","core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-8-0","net-9-0"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-08T17:17:47.686+00:00","detail_url":"/events/60881"}]}},{"id":60495,"cve_ids":["CVE-2026-69806"],"payload":{"kind":"advisory","title":".NET Elevation of Privilege Vulnerability","summary":"Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.","evidence":"cve:CVE-2026-69806","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-69806","aliases":["CVE-2026-69806"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:14:52.830Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69806"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-69806","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-10T18:26:08.285062Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-10T18:26:15.052Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:14:52.830Z"}}},"related_cves":[{"value":"CVE-2026-69806","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:af3e18d0-d42d-430a-8da1-441979f8d2d1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-69806","metrics":[],"products":[{"name":{"value":"dotnet","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-2026-69806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69806","metrics":[],"products":[{"name":{"value":"dotnet-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-sdk-2026-69806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-69806","advisory_id":"af3e18d0-d42d-430a-8da1-441979f8d2d1","event_types":["advisory"],"published_at":"2026-10-25T18:34:33.5399+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-08T17:19:29.823+00:00","detail_url":"/advisories/advisory%3Aaf3e18d0-d42d-430a-8da1-441979f8d2d1","group":{"id":"advisory:af3e18d0-d42d-430a-8da1-441979f8d2d1","revision":1,"primary_event_id":59757,"change":"published","superseded_by":[],"changed":{"id":59757,"cve_ids":["CVE-2026-69806"],"payload":{"kind":"advisory","title":".NET Elevation of Privilege Vulnerability","summary":"Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.","evidence":"cve:CVE-2026-69806","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-69806","aliases":["CVE-2026-69806"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:14:52.830Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69806"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-69806","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-10T18:26:08.285062Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-10T18:26:15.052Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:14:52.830Z"}}},"related_cves":[{"value":"CVE-2026-69806","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:af3e18d0-d42d-430a-8da1-441979f8d2d1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-69806","metrics":[],"products":[{"name":{"value":"dotnet","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-2026-69806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69806","metrics":[],"products":[{"name":{"value":"dotnet-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-sdk-2026-69806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-69806","advisory_id":"af3e18d0-d42d-430a-8da1-441979f8d2d1","event_types":["advisory"],"published_at":"2026-10-25T18:34:33.5399+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-9-0"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-08T17:19:29.823+00:00","detail_url":"/events/59757"},"members":[{"id":59757,"cve_ids":["CVE-2026-69806"],"payload":{"kind":"advisory","title":".NET Elevation of Privilege Vulnerability","summary":"Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.","evidence":"cve:CVE-2026-69806","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-69806","aliases":["CVE-2026-69806"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:14:52.830Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69806"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-69806","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-10T18:26:08.285062Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-10T18:26:15.052Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:14:52.830Z"}}},"related_cves":[{"value":"CVE-2026-69806","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:af3e18d0-d42d-430a-8da1-441979f8d2d1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-69806","metrics":[],"products":[{"name":{"value":"dotnet","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-2026-69806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69806","metrics":[],"products":[{"name":{"value":"dotnet-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-sdk-2026-69806","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-69806","advisory_id":"af3e18d0-d42d-430a-8da1-441979f8d2d1","event_types":["advisory"],"published_at":"2026-10-25T18:34:33.5399+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-9-0"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-08T17:19:29.823+00:00","detail_url":"/events/59757"}]}},{"id":60424,"cve_ids":["CVE-2026-69439"],"payload":{"kind":"advisory","title":".NET and Visual Studio Elevation of Privilege Vulnerability","summary":"Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.","evidence":"cve:CVE-2026-69439","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-69439","aliases":["CVE-2026-69439"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.31","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:13:02.100Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-69439","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-09T04:18:13.070091Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-09T09:54:54.597Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:13:02.100Z"}}},"related_cves":[{"value":"CVE-2026-69439","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:40c8852c-86ec-4215-b0c8-4494f04d1fc7","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-69439","metrics":[],"products":[{"name":{"value":"dotnet","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.31","evidence":"/affected/0/ranges"},{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-2026-69439","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69439","metrics":[],"products":[{"name":{"value":"dotnet-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.31","evidence":"/affected/0/ranges"},{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-sdk-2026-69439","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69439","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"products":[{"name":{"value":"Microsoft.DiaSymReader.Native","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"18.9.0-beta1.26405.2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-527h-q9f6-p7qx","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":4,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-69439","advisory_id":"40c8852c-86ec-4215-b0c8-4494f04d1fc7","event_types":["advisory"],"published_at":"2026-10-25T18:33:42.376249+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-08T17:17:35.65+00:00","detail_url":"/advisories/advisory%3A40c8852c-86ec-4215-b0c8-4494f04d1fc7","group":{"id":"advisory:40c8852c-86ec-4215-b0c8-4494f04d1fc7","revision":1,"primary_event_id":59630,"change":"published","superseded_by":[],"changed":{"id":59630,"cve_ids":["CVE-2026-69439"],"payload":{"kind":"advisory","title":".NET and Visual Studio Elevation of Privilege Vulnerability","summary":"Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.","evidence":"cve:CVE-2026-69439","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-69439","aliases":["CVE-2026-69439"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.31","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:13:02.100Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-69439","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-09T04:18:13.070091Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-09T09:54:54.597Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:13:02.100Z"}}},"related_cves":[{"value":"CVE-2026-69439","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:40c8852c-86ec-4215-b0c8-4494f04d1fc7","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-69439","metrics":[],"products":[{"name":{"value":"dotnet","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.31","evidence":"/affected/0/ranges"},{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-2026-69439","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69439","metrics":[],"products":[{"name":{"value":"dotnet-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.31","evidence":"/affected/0/ranges"},{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-sdk-2026-69439","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69439","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"products":[{"name":{"value":"Microsoft.DiaSymReader.Native","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"18.9.0-beta1.26405.2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-527h-q9f6-p7qx","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":4,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-69439","advisory_id":"40c8852c-86ec-4215-b0c8-4494f04d1fc7","event_types":["advisory"],"published_at":"2026-10-25T18:33:42.376249+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-8-0","net-9-0"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-08T17:17:35.65+00:00","detail_url":"/events/59630"},"members":[{"id":59630,"cve_ids":["CVE-2026-69439"],"payload":{"kind":"advisory","title":".NET and Visual Studio Elevation of Privilege Vulnerability","summary":"Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.","evidence":"cve:CVE-2026-69439","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-69439","aliases":["CVE-2026-69439"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.31","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:13:02.100Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-69439","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-09T04:18:13.070091Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-09T09:54:54.597Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:13:02.100Z"}}},"related_cves":[{"value":"CVE-2026-69439","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:40c8852c-86ec-4215-b0c8-4494f04d1fc7","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-69439","metrics":[],"products":[{"name":{"value":"dotnet","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.31","evidence":"/affected/0/ranges"},{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-2026-69439","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69439","metrics":[],"products":[{"name":{"value":"dotnet-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.0.31","evidence":"/affected/0/ranges"},{"value":"9.0.20","evidence":"/affected/0/ranges"},{"value":"10.0.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-dotnet-sdk-2026-69439","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-69439","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"products":[{"name":{"value":"Microsoft.DiaSymReader.Native","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"18.9.0-beta1.26405.2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-527h-q9f6-p7qx","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":4,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-69439","advisory_id":"40c8852c-86ec-4215-b0c8-4494f04d1fc7","event_types":["advisory"],"published_at":"2026-10-25T18:33:42.376249+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-8-0","net-9-0"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-08T17:17:35.65+00:00","detail_url":"/events/59630"}]}},{"id":50409,"cve_ids":["CVE-2026-70354"],"payload":{"kind":"advisory","title":".NET Core Remote Code Execution Vulnerability","summary":"Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.","evidence":"cve:CVE-2026-70354","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-70354","aliases":["CVE-2026-70354"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8984 & 3.0.30729.8980","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"3.0.0.0","lessThan":"2.0.50727.8984 & 3.0.30729.8980 & 4.7.4144.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)","Windows Server 2025","Windows Server 2025 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4144.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4805.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9344.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:54:52.565Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70354"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-70354","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-08-12T16:10:48.671638Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-12T16:58:44.050Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:54:52.565Z"}}},"related_cves":[{"value":"CVE-2026-70354","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a0c7bbe9-f33e-4044-9334-35568d4aa3a6","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-70354","advisory_id":"a0c7bbe9-f33e-4044-9334-35568d4aa3a6","event_types":["advisory"],"published_at":"2026-10-25T13:58:37.919409+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:07:15.162+00:00","detail_url":"/advisories/advisory%3Aa0c7bbe9-f33e-4044-9334-35568d4aa3a6","group":{"id":"advisory:a0c7bbe9-f33e-4044-9334-35568d4aa3a6","revision":1,"primary_event_id":49937,"change":"published","superseded_by":[],"changed":{"id":49937,"cve_ids":["CVE-2026-70354"],"payload":{"kind":"advisory","title":".NET Core Remote Code Execution Vulnerability","summary":"Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.","evidence":"cve:CVE-2026-70354","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-70354","aliases":["CVE-2026-70354"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8984 & 3.0.30729.8980","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"3.0.0.0","lessThan":"2.0.50727.8984 & 3.0.30729.8980 & 4.7.4144.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)","Windows Server 2025","Windows Server 2025 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4144.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4805.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9344.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:54:52.565Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70354"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-70354","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-08-12T16:10:48.671638Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-12T16:58:44.050Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:54:52.565Z"}}},"related_cves":[{"value":"CVE-2026-70354","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a0c7bbe9-f33e-4044-9334-35568d4aa3a6","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-70354","advisory_id":"a0c7bbe9-f33e-4044-9334-35568d4aa3a6","event_types":["advisory"],"published_at":"2026-10-25T13:58:37.919409+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:07:15.162+00:00","detail_url":"/events/49937"},"members":[{"id":49937,"cve_ids":["CVE-2026-70354"],"payload":{"kind":"advisory","title":".NET Core Remote Code Execution Vulnerability","summary":"Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.","evidence":"cve:CVE-2026-70354","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-70354","aliases":["CVE-2026-70354"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8984 & 3.0.30729.8980","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"3.0.0.0","lessThan":"2.0.50727.8984 & 3.0.30729.8980 & 4.7.4144.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)","Windows Server 2025","Windows Server 2025 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4144.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4805.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9344.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:54:52.565Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70354"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-70354","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-08-12T16:10:48.671638Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-12T16:58:44.050Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:54:52.565Z"}}},"related_cves":[{"value":"CVE-2026-70354","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a0c7bbe9-f33e-4044-9334-35568d4aa3a6","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-70354","advisory_id":"a0c7bbe9-f33e-4044-9334-35568d4aa3a6","event_types":["advisory"],"published_at":"2026-10-25T13:58:37.919409+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:07:15.162+00:00","detail_url":"/events/49937"}]}},{"id":50303,"cve_ids":["CVE-2026-62898"],"payload":{"kind":"advisory","title":"Microsoft QUIC Information Disclosure Vulnerability","summary":"Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.","evidence":"cve:CVE-2026-62898","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-62898","aliases":["CVE-2026-62898"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:54:54.093Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62898"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62898","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-11T17:47:31.814853Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-11T17:47:51.516Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:54:54.093Z"}}},"related_cves":[{"value":"CVE-2026-62898","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:0d501161-5764-4aa5-86a4-29ed73734c7b","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62898","advisory_id":"0d501161-5764-4aa5-86a4-29ed73734c7b","event_types":["advisory"],"published_at":"2026-10-25T13:56:49.561348+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:07:16.953+00:00","detail_url":"/advisories/advisory%3A0d501161-5764-4aa5-86a4-29ed73734c7b","group":{"id":"advisory:0d501161-5764-4aa5-86a4-29ed73734c7b","revision":1,"primary_event_id":49831,"change":"published","superseded_by":[],"changed":{"id":49831,"cve_ids":["CVE-2026-62898"],"payload":{"kind":"advisory","title":"Microsoft QUIC Information Disclosure Vulnerability","summary":"Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.","evidence":"cve:CVE-2026-62898","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-62898","aliases":["CVE-2026-62898"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:54:54.093Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62898"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62898","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-11T17:47:31.814853Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-11T17:47:51.516Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:54:54.093Z"}}},"related_cves":[{"value":"CVE-2026-62898","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:0d501161-5764-4aa5-86a4-29ed73734c7b","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62898","advisory_id":"0d501161-5764-4aa5-86a4-29ed73734c7b","event_types":["advisory"],"published_at":"2026-10-25T13:56:49.561348+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:07:16.953+00:00","detail_url":"/events/49831"},"members":[{"id":49831,"cve_ids":["CVE-2026-62898"],"payload":{"kind":"advisory","title":"Microsoft QUIC Information Disclosure Vulnerability","summary":"Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.","evidence":"cve:CVE-2026-62898","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-62898","aliases":["CVE-2026-62898"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:54:54.093Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62898"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62898","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-11T17:47:31.814853Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-11T17:47:51.516Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:54:54.093Z"}}},"related_cves":[{"value":"CVE-2026-62898","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:0d501161-5764-4aa5-86a4-29ed73734c7b","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62898","advisory_id":"0d501161-5764-4aa5-86a4-29ed73734c7b","event_types":["advisory"],"published_at":"2026-10-25T13:56:49.561348+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:07:16.953+00:00","detail_url":"/events/49831"}]}},{"id":50114,"cve_ids":["CVE-2026-62909"],"payload":{"kind":"advisory","title":".NET Elevation of Privilege Vulnerability","summary":"Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.","evidence":"cve:CVE-2026-62909","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-62909","aliases":["CVE-2026-62909"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:52:17.976Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62909"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62909","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-08-12T03:55:32.907064Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-12T14:57:36.360Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:52:17.976Z"}}},"related_cves":[{"value":"CVE-2026-62909","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a8b34dce-b240-40b9-a968-71b5dab80a55","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62909","advisory_id":"a8b34dce-b240-40b9-a968-71b5dab80a55","event_types":["advisory"],"published_at":"2026-10-25T13:53:21.538787+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:04:43.199+00:00","detail_url":"/advisories/advisory%3Aa8b34dce-b240-40b9-a968-71b5dab80a55","group":{"id":"advisory:a8b34dce-b240-40b9-a968-71b5dab80a55","revision":1,"primary_event_id":49642,"change":"published","superseded_by":[],"changed":{"id":49642,"cve_ids":["CVE-2026-62909"],"payload":{"kind":"advisory","title":".NET Elevation of Privilege Vulnerability","summary":"Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.","evidence":"cve:CVE-2026-62909","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-62909","aliases":["CVE-2026-62909"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:52:17.976Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62909"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62909","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-08-12T03:55:32.907064Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-12T14:57:36.360Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:52:17.976Z"}}},"related_cves":[{"value":"CVE-2026-62909","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a8b34dce-b240-40b9-a968-71b5dab80a55","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62909","advisory_id":"a8b34dce-b240-40b9-a968-71b5dab80a55","event_types":["advisory"],"published_at":"2026-10-25T13:53:21.538787+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:04:43.199+00:00","detail_url":"/events/49642"},"members":[{"id":49642,"cve_ids":["CVE-2026-62909"],"payload":{"kind":"advisory","title":".NET Elevation of Privilege Vulnerability","summary":"Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.","evidence":"cve:CVE-2026-62909","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-62909","aliases":["CVE-2026-62909"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:52:17.976Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62909"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62909","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-08-12T03:55:32.907064Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-12T14:57:36.360Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:52:17.976Z"}}},"related_cves":[{"value":"CVE-2026-62909","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a8b34dce-b240-40b9-a968-71b5dab80a55","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62909","advisory_id":"a8b34dce-b240-40b9-a968-71b5dab80a55","event_types":["advisory"],"published_at":"2026-10-25T13:53:21.538787+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:04:43.199+00:00","detail_url":"/events/49642"}]}},{"id":50111,"cve_ids":["CVE-2026-62900"],"payload":{"kind":"advisory","title":".NET Information Disclosure Vulnerability","summary":"Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.","evidence":"cve:CVE-2026-62900","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-62900","aliases":["CVE-2026-62900"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":5.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:52:15.898Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62900"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62900","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-11T20:38:22.870493Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-11T20:53:19.920Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:52:15.898Z"}}},"related_cves":[{"value":"CVE-2026-62900","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ae55034b-95e5-45dd-baaf-8c90f348ca08","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62900","advisory_id":"ae55034b-95e5-45dd-baaf-8c90f348ca08","event_types":["advisory"],"published_at":"2026-10-25T13:53:19.52772+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:04:40.748+00:00","detail_url":"/advisories/advisory%3Aae55034b-95e5-45dd-baaf-8c90f348ca08","group":{"id":"advisory:ae55034b-95e5-45dd-baaf-8c90f348ca08","revision":1,"primary_event_id":49639,"change":"published","superseded_by":[],"changed":{"id":49639,"cve_ids":["CVE-2026-62900"],"payload":{"kind":"advisory","title":".NET Information Disclosure Vulnerability","summary":"Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.","evidence":"cve:CVE-2026-62900","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-62900","aliases":["CVE-2026-62900"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":5.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:52:15.898Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62900"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62900","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-11T20:38:22.870493Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-11T20:53:19.920Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:52:15.898Z"}}},"related_cves":[{"value":"CVE-2026-62900","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ae55034b-95e5-45dd-baaf-8c90f348ca08","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62900","advisory_id":"ae55034b-95e5-45dd-baaf-8c90f348ca08","event_types":["advisory"],"published_at":"2026-10-25T13:53:19.52772+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:04:40.748+00:00","detail_url":"/events/49639"},"members":[{"id":49639,"cve_ids":["CVE-2026-62900"],"payload":{"kind":"advisory","title":".NET Information Disclosure Vulnerability","summary":"Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.","evidence":"cve:CVE-2026-62900","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-62900","aliases":["CVE-2026-62900"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":5.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:52:15.898Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62900"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62900","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-11T20:38:22.870493Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-11T20:53:19.920Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:52:15.898Z"}}},"related_cves":[{"value":"CVE-2026-62900","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ae55034b-95e5-45dd-baaf-8c90f348ca08","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62900","advisory_id":"ae55034b-95e5-45dd-baaf-8c90f348ca08","event_types":["advisory"],"published_at":"2026-10-25T13:53:19.52772+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:04:40.748+00:00","detail_url":"/events/49639"}]}},{"id":50109,"cve_ids":["CVE-2026-62901"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-62901","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-62901","aliases":["CVE-2026-62901"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:52:16.424Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62901"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62901","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-12T15:28:12.602676Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-12T15:28:26.506Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:52:16.424Z"}}},"related_cves":[{"value":"CVE-2026-62901","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6e8ef9c3-4ddb-4237-b63b-d31937c1c585","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62901","advisory_id":"6e8ef9c3-4ddb-4237-b63b-d31937c1c585","event_types":["advisory"],"published_at":"2026-10-25T13:53:18.176904+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:04:41.393+00:00","detail_url":"/advisories/advisory%3A6e8ef9c3-4ddb-4237-b63b-d31937c1c585","group":{"id":"advisory:6e8ef9c3-4ddb-4237-b63b-d31937c1c585","revision":1,"primary_event_id":49637,"change":"published","superseded_by":[],"changed":{"id":49637,"cve_ids":["CVE-2026-62901"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-62901","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-62901","aliases":["CVE-2026-62901"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:52:16.424Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62901"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62901","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-12T15:28:12.602676Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-12T15:28:26.506Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:52:16.424Z"}}},"related_cves":[{"value":"CVE-2026-62901","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6e8ef9c3-4ddb-4237-b63b-d31937c1c585","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62901","advisory_id":"6e8ef9c3-4ddb-4237-b63b-d31937c1c585","event_types":["advisory"],"published_at":"2026-10-25T13:53:18.176904+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:04:41.393+00:00","detail_url":"/events/49637"},"members":[{"id":49637,"cve_ids":["CVE-2026-62901"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-62901","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-62901","aliases":["CVE-2026-62901"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:52:16.424Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62901"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62901","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-12T15:28:12.602676Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-12T15:28:26.506Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:52:16.424Z"}}},"related_cves":[{"value":"CVE-2026-62901","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6e8ef9c3-4ddb-4237-b63b-d31937c1c585","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62901","advisory_id":"6e8ef9c3-4ddb-4237-b63b-d31937c1c585","event_types":["advisory"],"published_at":"2026-10-25T13:53:18.176904+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:04:41.393+00:00","detail_url":"/events/49637"}]}},{"id":50108,"cve_ids":["CVE-2026-62899"],"payload":{"kind":"advisory","title":".NET Security Feature Bypass Vulnerability","summary":"Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.","evidence":"cve:CVE-2026-62899","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-62899","aliases":["CVE-2026-62899"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":5.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:52:15.310Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62899"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62899","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-12T13:48:04.279657Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-12T13:52:41.999Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:52:15.310Z"}}},"related_cves":[{"value":"CVE-2026-62899","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b4cc9075-97a0-4c3f-b8cc-dc4e7ec6555c","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62899","advisory_id":"b4cc9075-97a0-4c3f-b8cc-dc4e7ec6555c","event_types":["advisory"],"published_at":"2026-10-25T13:53:17.536888+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:04:40.045+00:00","detail_url":"/advisories/advisory%3Ab4cc9075-97a0-4c3f-b8cc-dc4e7ec6555c","group":{"id":"advisory:b4cc9075-97a0-4c3f-b8cc-dc4e7ec6555c","revision":1,"primary_event_id":49636,"change":"published","superseded_by":[],"changed":{"id":49636,"cve_ids":["CVE-2026-62899"],"payload":{"kind":"advisory","title":".NET Security Feature Bypass Vulnerability","summary":"Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.","evidence":"cve:CVE-2026-62899","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-62899","aliases":["CVE-2026-62899"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":5.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:52:15.310Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62899"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62899","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-12T13:48:04.279657Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-12T13:52:41.999Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:52:15.310Z"}}},"related_cves":[{"value":"CVE-2026-62899","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b4cc9075-97a0-4c3f-b8cc-dc4e7ec6555c","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62899","advisory_id":"b4cc9075-97a0-4c3f-b8cc-dc4e7ec6555c","event_types":["advisory"],"published_at":"2026-10-25T13:53:17.536888+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:04:40.045+00:00","detail_url":"/events/49636"},"members":[{"id":49636,"cve_ids":["CVE-2026-62899"],"payload":{"kind":"advisory","title":".NET Security Feature Bypass Vulnerability","summary":"Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.","evidence":"cve:CVE-2026-62899","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-62899","aliases":["CVE-2026-62899"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":5.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:52:15.310Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62899"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62899","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-12T13:48:04.279657Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-12T13:52:41.999Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:52:15.310Z"}}},"related_cves":[{"value":"CVE-2026-62899","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b4cc9075-97a0-4c3f-b8cc-dc4e7ec6555c","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62899","advisory_id":"b4cc9075-97a0-4c3f-b8cc-dc4e7ec6555c","event_types":["advisory"],"published_at":"2026-10-25T13:53:17.536888+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:04:40.045+00:00","detail_url":"/events/49636"}]}},{"id":50106,"cve_ids":["CVE-2026-62897"],"payload":{"kind":"advisory","title":".NET Framework Remote Code Execution Vulnerability","summary":"Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.","evidence":"cve:CVE-2026-62897","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-62897","aliases":["CVE-2026-62897"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.9183 & 3.0.30729.9169","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for ARM64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for ARM64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9344.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:52:14.776Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62897"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62897","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-08-12T03:55:40.593167Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-12T14:56:23.606Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:52:14.776Z"}}},"related_cves":[{"value":"CVE-2026-62897","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:559871d6-09b3-4d29-8358-859bdcc3f035","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62897","advisory_id":"559871d6-09b3-4d29-8358-859bdcc3f035","event_types":["advisory"],"published_at":"2026-10-25T13:53:16.234462+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:04:39.377+00:00","detail_url":"/advisories/advisory%3A559871d6-09b3-4d29-8358-859bdcc3f035","group":{"id":"advisory:559871d6-09b3-4d29-8358-859bdcc3f035","revision":1,"primary_event_id":49634,"change":"published","superseded_by":[],"changed":{"id":49634,"cve_ids":["CVE-2026-62897"],"payload":{"kind":"advisory","title":".NET Framework Remote Code Execution Vulnerability","summary":"Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.","evidence":"cve:CVE-2026-62897","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-62897","aliases":["CVE-2026-62897"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.9183 & 3.0.30729.9169","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for ARM64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for ARM64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9344.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:52:14.776Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62897"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62897","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-08-12T03:55:40.593167Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-12T14:56:23.606Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:52:14.776Z"}}},"related_cves":[{"value":"CVE-2026-62897","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:559871d6-09b3-4d29-8358-859bdcc3f035","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62897","advisory_id":"559871d6-09b3-4d29-8358-859bdcc3f035","event_types":["advisory"],"published_at":"2026-10-25T13:53:16.234462+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:04:39.377+00:00","detail_url":"/events/49634"},"members":[{"id":49634,"cve_ids":["CVE-2026-62897"],"payload":{"kind":"advisory","title":".NET Framework Remote Code Execution Vulnerability","summary":"Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.","evidence":"cve:CVE-2026-62897","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-62897","aliases":["CVE-2026-62897"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.11","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.30","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.9183 & 3.0.30729.9169","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for ARM64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for ARM64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9344.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.38","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.8","versions":[{"status":"affected","version":"18.0","lessThan":"18.8.3","versionType":"custom"}]}],"modified":"2026-10-21T20:52:14.776Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62897"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62897","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-08-12T03:55:40.593167Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-12T14:56:23.606Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-21T20:52:14.776Z"}}},"related_cves":[{"value":"CVE-2026-62897","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:559871d6-09b3-4d29-8358-859bdcc3f035","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62897","advisory_id":"559871d6-09b3-4d29-8358-859bdcc3f035","event_types":["advisory"],"published_at":"2026-10-25T13:53:16.234462+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-08-11T17:04:39.377+00:00","detail_url":"/events/49634"}]}},{"id":29462,"cve_ids":["CVE-2026-32203"],"payload":{"kind":"advisory","title":".NET and Visual Studio Denial of Service Vulnerability","summary":"Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-32203","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.4","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-32203","aliases":["CVE-2026-32203"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.6","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.15","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.30","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.4","versions":[{"status":"affected","version":"18.4.0","lessThan":"18.4.4","versionType":"custom"}]}],"modified":"2026-10-15T15:53:38.631Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32203"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-32203","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-15T10:41:37.792331Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-15T10:43:56.726Z"}},{"title":"dotnet: .NET: Denial of Service via stack overflow","metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:10.0.106-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0.126-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:10.0.106-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:9.0.116-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:10.0.106-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"10.0.106-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"8.0.126-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"9.0.116-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"timeline":[{"lang":"en","time":"2026-04-13T05:02:08.475Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-04-14T18:39:07.491Z","value":"Made public."}],"solutions":[{"lang":"en","value":"RHSA-2026:13281: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:13280: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:8467: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8472: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8473: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8468: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8475: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:13693: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"},{"lang":"en","value":"RHSA-2026:13283: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:13282: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:8471: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8469: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8474: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:9077: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9080: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9205: Red Hat Hardened Images"}],"x_adpType":"supplier","datePublic":"2026-04-14T18:39:07.491Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-32203","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457740","name":"RHBZ#2457740","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32203.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13281","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13280","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8467","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8470","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8472","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8473","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8468","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8475","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13693","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13283","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13282","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8471","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8469","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8474","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9077","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9080","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9205","tags":["vendor-advisory","x_refsource_REDHAT"]}],"workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"x_generator":{"engine":"sadp-cli 1.0.0"},"descriptions":[{"lang":"en","value":"A flaw was found in .NET. A remote attacker could exploit a stack overflow vulnerability during encrypted key nested decryption, leading to a Denial of Service (DoS). This could make the affected system unavailable to legitimate users."}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","shortName":"redhat-SADP","dateUpdated":"2026-07-15T01:08:25.314Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-15T15:53:38.631Z"}}},"related_cves":[{"value":"CVE-2026-32203","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:bb74f021-6914-487b-a037-9701a727184c","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-32203","advisory_id":"bb74f021-6914-487b-a037-9701a727184c","event_types":["advisory"],"published_at":"2026-10-25T07:55:45.413811+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-4","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-04-14T16:58:38.178+00:00","detail_url":"/advisories/advisory%3Abb74f021-6914-487b-a037-9701a727184c","group":{"id":"advisory:bb74f021-6914-487b-a037-9701a727184c","revision":1,"primary_event_id":29228,"change":"published","superseded_by":[],"changed":{"id":29228,"cve_ids":["CVE-2026-32203"],"payload":{"kind":"advisory","title":".NET and Visual Studio Denial of Service Vulnerability","summary":"Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-32203","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.4","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-32203","aliases":["CVE-2026-32203"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.6","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.15","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.30","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.4","versions":[{"status":"affected","version":"18.4.0","lessThan":"18.4.4","versionType":"custom"}]}],"modified":"2026-10-15T15:53:38.631Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32203"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-32203","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-15T10:41:37.792331Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-15T10:43:56.726Z"}},{"title":"dotnet: .NET: Denial of Service via stack overflow","metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:10.0.106-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0.126-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:10.0.106-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:9.0.116-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:10.0.106-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"10.0.106-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"8.0.126-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"9.0.116-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"timeline":[{"lang":"en","time":"2026-04-13T05:02:08.475Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-04-14T18:39:07.491Z","value":"Made public."}],"solutions":[{"lang":"en","value":"RHSA-2026:13281: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:13280: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:8467: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8472: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8473: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8468: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8475: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:13693: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"},{"lang":"en","value":"RHSA-2026:13283: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:13282: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:8471: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8469: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8474: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:9077: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9080: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9205: Red Hat Hardened Images"}],"x_adpType":"supplier","datePublic":"2026-04-14T18:39:07.491Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-32203","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457740","name":"RHBZ#2457740","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32203.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13281","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13280","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8467","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8470","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8472","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8473","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8468","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8475","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13693","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13283","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13282","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8471","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8469","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8474","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9077","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9080","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9205","tags":["vendor-advisory","x_refsource_REDHAT"]}],"workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"x_generator":{"engine":"sadp-cli 1.0.0"},"descriptions":[{"lang":"en","value":"A flaw was found in .NET. A remote attacker could exploit a stack overflow vulnerability during encrypted key nested decryption, leading to a Denial of Service (DoS). This could make the affected system unavailable to legitimate users."}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","shortName":"redhat-SADP","dateUpdated":"2026-07-15T01:08:25.314Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-15T15:53:38.631Z"}}},"related_cves":[{"value":"CVE-2026-32203","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:bb74f021-6914-487b-a037-9701a727184c","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-32203","advisory_id":"bb74f021-6914-487b-a037-9701a727184c","event_types":["advisory"],"published_at":"2026-10-25T07:55:45.413811+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-4","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-04-14T16:58:38.178+00:00","detail_url":"/events/29228"},"members":[{"id":29228,"cve_ids":["CVE-2026-32203"],"payload":{"kind":"advisory","title":".NET and Visual Studio Denial of Service Vulnerability","summary":"Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-32203","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.4","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-32203","aliases":["CVE-2026-32203"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.6","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.15","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.30","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.4","versions":[{"status":"affected","version":"18.4.0","lessThan":"18.4.4","versionType":"custom"}]}],"modified":"2026-10-15T15:53:38.631Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32203"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-32203","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-15T10:41:37.792331Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-15T10:43:56.726Z"}},{"title":"dotnet: .NET: Denial of Service via stack overflow","metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:10.0.106-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0.126-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:10.0.106-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:9.0.116-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:10.0.106-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"10.0.106-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"8.0.126-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"9.0.116-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"timeline":[{"lang":"en","time":"2026-04-13T05:02:08.475Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-04-14T18:39:07.491Z","value":"Made public."}],"solutions":[{"lang":"en","value":"RHSA-2026:13281: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:13280: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:8467: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8472: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8473: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8468: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8475: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:13693: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"},{"lang":"en","value":"RHSA-2026:13283: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:13282: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:8471: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8469: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8474: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:9077: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9080: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9205: Red Hat Hardened Images"}],"x_adpType":"supplier","datePublic":"2026-04-14T18:39:07.491Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-32203","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457740","name":"RHBZ#2457740","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32203.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13281","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13280","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8467","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8470","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8472","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8473","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8468","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8475","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13693","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13283","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13282","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8471","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8469","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8474","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9077","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9080","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9205","tags":["vendor-advisory","x_refsource_REDHAT"]}],"workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"x_generator":{"engine":"sadp-cli 1.0.0"},"descriptions":[{"lang":"en","value":"A flaw was found in .NET. A remote attacker could exploit a stack overflow vulnerability during encrypted key nested decryption, leading to a Denial of Service (DoS). This could make the affected system unavailable to legitimate users."}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","shortName":"redhat-SADP","dateUpdated":"2026-07-15T01:08:25.314Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-15T15:53:38.631Z"}}},"related_cves":[{"value":"CVE-2026-32203","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:bb74f021-6914-487b-a037-9701a727184c","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-32203","advisory_id":"bb74f021-6914-487b-a037-9701a727184c","event_types":["advisory"],"published_at":"2026-10-25T07:55:45.413811+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-4","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-04-14T16:58:38.178+00:00","detail_url":"/events/29228"}]}},{"id":29436,"cve_ids":["CVE-2026-26171"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-26171","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"PowerShell 7.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"PowerShell 7.6","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-26171","aliases":["CVE-2026-26171"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.6","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.15","versionType":"custom"}]},{"vendor":"Microsoft","product":"PowerShell 7.5","versions":[{"status":"affected","version":"7.5.0","lessThan":"7.5.6","versionType":"custom"}]},{"vendor":"Microsoft","product":"PowerShell 7.6","versions":[{"status":"affected","version":"7.6.0","lessThan":"7.6.1","versionType":"custom"}]}],"modified":"2026-10-15T15:53:38.038Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26171"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-26171","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-14T18:53:29.483401Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-14T18:53:37.106Z"}},{"title":"dotnet: .NET: Security Bypass and Denial of Service Vulnerability","metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:10.0.106-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0.126-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:10.0.106-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:9.0.116-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:10.0.106-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"10.0.106-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"8.0.126-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"9.0.116-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"timeline":[{"lang":"en","time":"2026-04-13T05:00:07.414Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-04-14T18:39:18.599Z","value":"Made public."}],"solutions":[{"lang":"en","value":"RHSA-2026:13281: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:13280: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:8467: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8472: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8473: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8468: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8475: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:13693: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"},{"lang":"en","value":"RHSA-2026:13283: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:13282: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:8471: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8469: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8474: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:9077: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9080: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9205: Red Hat Hardened Images"}],"x_adpType":"supplier","datePublic":"2026-04-14T18:39:18.599Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-26171","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457739","name":"RHBZ#2457739","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26171.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13281","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13280","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8467","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8470","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8472","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8473","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8468","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8475","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13693","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13283","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13282","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8471","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8469","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8474","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9077","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9080","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9205","tags":["vendor-advisory","x_refsource_REDHAT"]}],"workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"x_generator":{"engine":"sadp-cli 1.0.0"},"descriptions":[{"lang":"en","value":"A flaw was found in .NET. A remote attacker could exploit a vulnerability related to unsafe transforms in EncryptedXml. This could lead to a Denial of Service (DoS), making the service unavailable, and a bypass of security features."}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-776","description":"Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')"}]}],"providerMetadata":{"orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","shortName":"redhat-SADP","dateUpdated":"2026-07-15T01:15:11.907Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-15T15:53:38.038Z"}}},"related_cves":[{"value":"CVE-2026-26171","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:dcc5f5ee-3429-4a2a-885a-48d94e0fae78","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-26171","advisory_id":"dcc5f5ee-3429-4a2a-885a-48d94e0fae78","event_types":["advisory"],"published_at":"2026-10-25T07:55:28.124815+00:00","technologies":["core-cve","net-10-0","net-8-0","net-9-0","powershell-7-5","powershell-7-6"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-04-14T16:58:37.655+00:00","detail_url":"/advisories/advisory%3Adcc5f5ee-3429-4a2a-885a-48d94e0fae78","group":{"id":"advisory:dcc5f5ee-3429-4a2a-885a-48d94e0fae78","revision":1,"primary_event_id":29202,"change":"published","superseded_by":[],"changed":{"id":29202,"cve_ids":["CVE-2026-26171"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-26171","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"PowerShell 7.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"PowerShell 7.6","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-26171","aliases":["CVE-2026-26171"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.6","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.15","versionType":"custom"}]},{"vendor":"Microsoft","product":"PowerShell 7.5","versions":[{"status":"affected","version":"7.5.0","lessThan":"7.5.6","versionType":"custom"}]},{"vendor":"Microsoft","product":"PowerShell 7.6","versions":[{"status":"affected","version":"7.6.0","lessThan":"7.6.1","versionType":"custom"}]}],"modified":"2026-10-15T15:53:38.038Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26171"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-26171","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-14T18:53:29.483401Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-14T18:53:37.106Z"}},{"title":"dotnet: .NET: Security Bypass and Denial of Service Vulnerability","metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:10.0.106-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0.126-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:10.0.106-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:9.0.116-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:10.0.106-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"10.0.106-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"8.0.126-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"9.0.116-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"timeline":[{"lang":"en","time":"2026-04-13T05:00:07.414Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-04-14T18:39:18.599Z","value":"Made public."}],"solutions":[{"lang":"en","value":"RHSA-2026:13281: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:13280: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:8467: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8472: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8473: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8468: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8475: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:13693: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"},{"lang":"en","value":"RHSA-2026:13283: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:13282: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:8471: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8469: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8474: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:9077: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9080: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9205: Red Hat Hardened Images"}],"x_adpType":"supplier","datePublic":"2026-04-14T18:39:18.599Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-26171","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457739","name":"RHBZ#2457739","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26171.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13281","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13280","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8467","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8470","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8472","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8473","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8468","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8475","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13693","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13283","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13282","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8471","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8469","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8474","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9077","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9080","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9205","tags":["vendor-advisory","x_refsource_REDHAT"]}],"workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"x_generator":{"engine":"sadp-cli 1.0.0"},"descriptions":[{"lang":"en","value":"A flaw was found in .NET. A remote attacker could exploit a vulnerability related to unsafe transforms in EncryptedXml. This could lead to a Denial of Service (DoS), making the service unavailable, and a bypass of security features."}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-776","description":"Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')"}]}],"providerMetadata":{"orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","shortName":"redhat-SADP","dateUpdated":"2026-07-15T01:15:11.907Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-15T15:53:38.038Z"}}},"related_cves":[{"value":"CVE-2026-26171","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:dcc5f5ee-3429-4a2a-885a-48d94e0fae78","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-26171","advisory_id":"dcc5f5ee-3429-4a2a-885a-48d94e0fae78","event_types":["advisory"],"published_at":"2026-10-25T07:55:28.124815+00:00","technologies":["core-cve","net-10-0","net-8-0","net-9-0","powershell-7-5","powershell-7-6"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-04-14T16:58:37.655+00:00","detail_url":"/events/29202"},"members":[{"id":29202,"cve_ids":["CVE-2026-26171"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-26171","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"PowerShell 7.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"PowerShell 7.6","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-26171","aliases":["CVE-2026-26171"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.6","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.15","versionType":"custom"}]},{"vendor":"Microsoft","product":"PowerShell 7.5","versions":[{"status":"affected","version":"7.5.0","lessThan":"7.5.6","versionType":"custom"}]},{"vendor":"Microsoft","product":"PowerShell 7.6","versions":[{"status":"affected","version":"7.6.0","lessThan":"7.6.1","versionType":"custom"}]}],"modified":"2026-10-15T15:53:38.038Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26171"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-26171","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-14T18:53:29.483401Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-14T18:53:37.106Z"}},{"title":"dotnet: .NET: Security Bypass and Denial of Service Vulnerability","metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:10.0.106-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0.126-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:10.0.106-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:9.0.116-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:10.0.106-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"10.0.106-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"8.0.126-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"9.0.116-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"timeline":[{"lang":"en","time":"2026-04-13T05:00:07.414Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-04-14T18:39:18.599Z","value":"Made public."}],"solutions":[{"lang":"en","value":"RHSA-2026:13281: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:13280: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:8467: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8472: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8473: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8468: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8475: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:13693: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"},{"lang":"en","value":"RHSA-2026:13283: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:13282: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:8471: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8469: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8474: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:9077: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9080: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9205: Red Hat Hardened Images"}],"x_adpType":"supplier","datePublic":"2026-04-14T18:39:18.599Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-26171","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457739","name":"RHBZ#2457739","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26171.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13281","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13280","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8467","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8470","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8472","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8473","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8468","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8475","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13693","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13283","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13282","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8471","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8469","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8474","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9077","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9080","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9205","tags":["vendor-advisory","x_refsource_REDHAT"]}],"workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"x_generator":{"engine":"sadp-cli 1.0.0"},"descriptions":[{"lang":"en","value":"A flaw was found in .NET. A remote attacker could exploit a vulnerability related to unsafe transforms in EncryptedXml. This could lead to a Denial of Service (DoS), making the service unavailable, and a bypass of security features."}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-776","description":"Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')"}]}],"providerMetadata":{"orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","shortName":"redhat-SADP","dateUpdated":"2026-07-15T01:15:11.907Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-15T15:53:38.038Z"}}},"related_cves":[{"value":"CVE-2026-26171","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:dcc5f5ee-3429-4a2a-885a-48d94e0fae78","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-26171","advisory_id":"dcc5f5ee-3429-4a2a-885a-48d94e0fae78","event_types":["advisory"],"published_at":"2026-10-25T07:55:28.124815+00:00","technologies":["core-cve","net-10-0","net-8-0","net-9-0","powershell-7-5","powershell-7-6"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-04-14T16:58:37.655+00:00","detail_url":"/events/29202"}]}},{"id":29412,"cve_ids":["CVE-2026-33116"],"payload":{"kind":"advisory","title":".NET, .NET Framework, and Visual Studio Denial of Service Vulnerability","summary":"Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-33116","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-33116","aliases":["CVE-2026-33116"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.6","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.15","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8982 & 3.0.30729.8976","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 22H2 for ARM64-based Systems","Windows 11 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)","Windows Server 2022, 23H2 Edition (Server Core installation)","Windows Server 2025","Windows Server 2025 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.8.4801.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4801.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]}],"modified":"2026-10-15T15:52:59.382Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33116"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-33116","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-14T19:48:26.946135Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-14T19:48:35.606Z"}},{"title":"dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform","metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:10.0.106-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0.126-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:10.0.106-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:9.0.116-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:10.0.106-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"10.0.106-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"8.0.126-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"9.0.116-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"timeline":[{"lang":"en","time":"2026-04-13T05:12:13.834Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-04-14T18:38:58.320Z","value":"Made public."}],"solutions":[{"lang":"en","value":"RHSA-2026:13281: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:13280: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:8467: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8472: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8473: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8468: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8475: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:13693: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"},{"lang":"en","value":"RHSA-2026:13283: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:13282: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:8471: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8469: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8474: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:9077: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9080: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9205: Red Hat Hardened Images"}],"x_adpType":"supplier","datePublic":"2026-04-14T18:38:58.320Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-33116","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457741","name":"RHBZ#2457741","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33116.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13281","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13280","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8467","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8470","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8472","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8473","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8468","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8475","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13693","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13283","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13282","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8471","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8469","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8474","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9077","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9080","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9205","tags":["vendor-advisory","x_refsource_REDHAT"]}],"workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"x_generator":{"engine":"sadp-cli 1.0.0"},"descriptions":[{"lang":"en","value":"A flaw was found in .NET. A remote attacker could exploit this vulnerability by crafting a malicious XML document that triggers an infinite recursion within the XmlDecryptionTransform component. This could lead to a Denial of Service (DoS), making the affected system unresponsive."}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-776","description":"Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')"}]}],"providerMetadata":{"orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","shortName":"redhat-SADP","dateUpdated":"2026-07-15T01:07:17.575Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-15T15:52:59.382Z"}}},"related_cves":[{"value":"CVE-2026-33116","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:cfe5112b-8a56-44ff-974f-c47780a5511f","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-33116","advisory_id":"cfe5112b-8a56-44ff-974f-c47780a5511f","event_types":["advisory"],"published_at":"2026-10-25T07:54:32.166745+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-04-14T16:57:47.626+00:00","detail_url":"/advisories/advisory%3Acfe5112b-8a56-44ff-974f-c47780a5511f","group":{"id":"advisory:cfe5112b-8a56-44ff-974f-c47780a5511f","revision":1,"primary_event_id":29179,"change":"published","superseded_by":[],"changed":{"id":29179,"cve_ids":["CVE-2026-33116"],"payload":{"kind":"advisory","title":".NET, .NET Framework, and Visual Studio Denial of Service Vulnerability","summary":"Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-33116","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-33116","aliases":["CVE-2026-33116"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.6","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.15","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8982 & 3.0.30729.8976","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 22H2 for ARM64-based Systems","Windows 11 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)","Windows Server 2022, 23H2 Edition (Server Core installation)","Windows Server 2025","Windows Server 2025 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.8.4801.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4801.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]}],"modified":"2026-10-15T15:52:59.382Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33116"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-33116","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-14T19:48:26.946135Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-14T19:48:35.606Z"}},{"title":"dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform","metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:10.0.106-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0.126-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:10.0.106-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:9.0.116-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:10.0.106-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"10.0.106-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"8.0.126-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"9.0.116-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"timeline":[{"lang":"en","time":"2026-04-13T05:12:13.834Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-04-14T18:38:58.320Z","value":"Made public."}],"solutions":[{"lang":"en","value":"RHSA-2026:13281: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:13280: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:8467: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8472: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8473: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8468: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8475: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:13693: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"},{"lang":"en","value":"RHSA-2026:13283: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:13282: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:8471: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8469: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8474: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:9077: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9080: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9205: Red Hat Hardened Images"}],"x_adpType":"supplier","datePublic":"2026-04-14T18:38:58.320Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-33116","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457741","name":"RHBZ#2457741","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33116.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13281","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13280","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8467","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8470","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8472","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8473","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8468","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8475","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13693","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13283","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13282","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8471","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8469","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8474","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9077","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9080","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9205","tags":["vendor-advisory","x_refsource_REDHAT"]}],"workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"x_generator":{"engine":"sadp-cli 1.0.0"},"descriptions":[{"lang":"en","value":"A flaw was found in .NET. A remote attacker could exploit this vulnerability by crafting a malicious XML document that triggers an infinite recursion within the XmlDecryptionTransform component. This could lead to a Denial of Service (DoS), making the affected system unresponsive."}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-776","description":"Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')"}]}],"providerMetadata":{"orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","shortName":"redhat-SADP","dateUpdated":"2026-07-15T01:07:17.575Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-15T15:52:59.382Z"}}},"related_cves":[{"value":"CVE-2026-33116","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:cfe5112b-8a56-44ff-974f-c47780a5511f","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-33116","advisory_id":"cfe5112b-8a56-44ff-974f-c47780a5511f","event_types":["advisory"],"published_at":"2026-10-25T07:54:32.166745+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-04-14T16:57:47.626+00:00","detail_url":"/events/29179"},"members":[{"id":29179,"cve_ids":["CVE-2026-33116"],"payload":{"kind":"advisory","title":".NET, .NET Framework, and Visual Studio Denial of Service Vulnerability","summary":"Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-33116","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-33116","aliases":["CVE-2026-33116"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.6","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.15","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8982 & 3.0.30729.8976","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 22H2 for ARM64-based Systems","Windows 11 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)","Windows Server 2022, 23H2 Edition (Server Core installation)","Windows Server 2025","Windows Server 2025 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.8.4801.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4801.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]}],"modified":"2026-10-15T15:52:59.382Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33116"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-33116","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-14T19:48:26.946135Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-14T19:48:35.606Z"}},{"title":"dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform","metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:10.0.106-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0.126-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:10.0.106-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:9.0.116-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:10.0.106-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"10.0.106-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"8.0.126-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"9.0.116-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"timeline":[{"lang":"en","time":"2026-04-13T05:12:13.834Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-04-14T18:38:58.320Z","value":"Made public."}],"solutions":[{"lang":"en","value":"RHSA-2026:13281: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:13280: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:8467: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8472: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8473: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8468: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8475: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:13693: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"},{"lang":"en","value":"RHSA-2026:13283: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:13282: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:8471: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8469: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8474: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:9077: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9080: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9205: Red Hat Hardened Images"}],"x_adpType":"supplier","datePublic":"2026-04-14T18:38:58.320Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-33116","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457741","name":"RHBZ#2457741","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33116.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13281","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13280","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8467","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8470","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8472","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8473","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8468","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8475","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13693","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13283","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13282","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8471","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8469","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8474","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9077","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9080","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9205","tags":["vendor-advisory","x_refsource_REDHAT"]}],"workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"x_generator":{"engine":"sadp-cli 1.0.0"},"descriptions":[{"lang":"en","value":"A flaw was found in .NET. A remote attacker could exploit this vulnerability by crafting a malicious XML document that triggers an infinite recursion within the XmlDecryptionTransform component. This could lead to a Denial of Service (DoS), making the affected system unresponsive."}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-776","description":"Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')"}]}],"providerMetadata":{"orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","shortName":"redhat-SADP","dateUpdated":"2026-07-15T01:07:17.575Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-15T15:52:59.382Z"}}},"related_cves":[{"value":"CVE-2026-33116","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:cfe5112b-8a56-44ff-974f-c47780a5511f","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-33116","advisory_id":"cfe5112b-8a56-44ff-974f-c47780a5511f","event_types":["advisory"],"published_at":"2026-10-25T07:54:32.166745+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-04-14T16:57:47.626+00:00","detail_url":"/events/29179"}]}},{"id":29384,"cve_ids":["CVE-2026-32178"],"payload":{"kind":"advisory","title":".NET Spoofing Vulnerability","summary":"Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.","evidence":"cve:CVE-2026-32178","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-32178","aliases":["CVE-2026-32178"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.6","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.15","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.30","versionType":"custom"}]}],"modified":"2026-10-15T15:52:47.483Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32178"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-32178","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-15T10:40:37.117716Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-15T10:43:57.251Z"}},{"title":"dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw","metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:10.0.106-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0.126-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:10.0.106-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:9.0.116-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:10.0.106-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"10.0.106-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"8.0.126-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"9.0.116-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"timeline":[{"lang":"en","time":"2026-04-13T08:04:44.681Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-04-14T18:41:05.485Z","value":"Made public."}],"solutions":[{"lang":"en","value":"RHSA-2026:13281: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:13280: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:8467: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8472: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8473: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8468: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8475: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:13693: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"},{"lang":"en","value":"RHSA-2026:13283: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:13282: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:8471: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8469: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8474: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:9077: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9080: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9205: Red Hat Hardened Images"}],"x_adpType":"supplier","datePublic":"2026-04-14T18:41:05.485Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-32178","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457781","name":"RHBZ#2457781","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32178.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13281","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13280","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8467","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8470","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8472","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8473","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8468","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8475","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13693","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13283","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13282","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8471","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8469","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8474","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9077","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9080","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9205","tags":["vendor-advisory","x_refsource_REDHAT"]}],"workarounds":[{"lang":"en","value":"Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security's standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available."}],"x_generator":{"engine":"sadp-cli 1.0.0"},"descriptions":[{"lang":"en","value":"A flaw was found in the .NET runtime (System.Net.Mail) in how email address data is parsed. Improper neutralization of special characters, specifically carriage return and line feed (CR/LF) sequences, may allow specially crafted email address input to be interpreted incorrectly. An attacker could exploit this issue to perform email spoofing by injecting additional headers or altering how the email address is processed during SMTP operations"}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-138","description":"Improper Neutralization of Special Elements"}]}],"providerMetadata":{"orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","shortName":"redhat-SADP","dateUpdated":"2026-07-15T01:08:27.670Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-15T15:52:47.483Z"}}},"related_cves":[{"value":"CVE-2026-32178","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:922f0159-f34f-4c55-9f69-f9c878f609a3","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-32178","advisory_id":"922f0159-f34f-4c55-9f69-f9c878f609a3","event_types":["advisory"],"published_at":"2026-10-25T07:54:17.199546+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-04-14T16:57:31.355+00:00","detail_url":"/advisories/advisory%3A922f0159-f34f-4c55-9f69-f9c878f609a3","group":{"id":"advisory:922f0159-f34f-4c55-9f69-f9c878f609a3","revision":1,"primary_event_id":29151,"change":"published","superseded_by":[],"changed":{"id":29151,"cve_ids":["CVE-2026-32178"],"payload":{"kind":"advisory","title":".NET Spoofing Vulnerability","summary":"Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.","evidence":"cve:CVE-2026-32178","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-32178","aliases":["CVE-2026-32178"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.6","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.15","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.30","versionType":"custom"}]}],"modified":"2026-10-15T15:52:47.483Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32178"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-32178","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-15T10:40:37.117716Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-15T10:43:57.251Z"}},{"title":"dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw","metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:10.0.106-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0.126-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:10.0.106-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:9.0.116-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:10.0.106-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"10.0.106-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"8.0.126-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"9.0.116-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"timeline":[{"lang":"en","time":"2026-04-13T08:04:44.681Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-04-14T18:41:05.485Z","value":"Made public."}],"solutions":[{"lang":"en","value":"RHSA-2026:13281: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:13280: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:8467: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8472: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8473: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8468: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8475: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:13693: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"},{"lang":"en","value":"RHSA-2026:13283: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:13282: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:8471: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8469: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8474: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:9077: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9080: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9205: Red Hat Hardened Images"}],"x_adpType":"supplier","datePublic":"2026-04-14T18:41:05.485Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-32178","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457781","name":"RHBZ#2457781","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32178.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13281","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13280","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8467","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8470","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8472","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8473","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8468","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8475","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13693","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13283","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13282","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8471","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8469","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8474","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9077","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9080","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9205","tags":["vendor-advisory","x_refsource_REDHAT"]}],"workarounds":[{"lang":"en","value":"Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security's standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available."}],"x_generator":{"engine":"sadp-cli 1.0.0"},"descriptions":[{"lang":"en","value":"A flaw was found in the .NET runtime (System.Net.Mail) in how email address data is parsed. Improper neutralization of special characters, specifically carriage return and line feed (CR/LF) sequences, may allow specially crafted email address input to be interpreted incorrectly. An attacker could exploit this issue to perform email spoofing by injecting additional headers or altering how the email address is processed during SMTP operations"}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-138","description":"Improper Neutralization of Special Elements"}]}],"providerMetadata":{"orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","shortName":"redhat-SADP","dateUpdated":"2026-07-15T01:08:27.670Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-15T15:52:47.483Z"}}},"related_cves":[{"value":"CVE-2026-32178","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:922f0159-f34f-4c55-9f69-f9c878f609a3","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-32178","advisory_id":"922f0159-f34f-4c55-9f69-f9c878f609a3","event_types":["advisory"],"published_at":"2026-10-25T07:54:17.199546+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-04-14T16:57:31.355+00:00","detail_url":"/events/29151"},"members":[{"id":29151,"cve_ids":["CVE-2026-32178"],"payload":{"kind":"advisory","title":".NET Spoofing Vulnerability","summary":"Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.","evidence":"cve:CVE-2026-32178","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-32178","aliases":["CVE-2026-32178"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.6","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.26","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.15","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.19","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.30","versionType":"custom"}]}],"modified":"2026-10-15T15:52:47.483Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32178"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-32178","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-15T10:40:37.117716Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-15T10:43:57.251Z"}},{"title":"dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw","metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:10.0.106-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el10_0","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:8.0.126-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:10.0.106-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","versions":[{"status":"unaffected","version":"0:9.0.116-1.el8_10","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:10.0.106-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_7","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.4"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_4","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:9.0.116-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhel_eus:9.6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","versions":[{"status":"unaffected","version":"0:8.0.126-1.el9_6","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"10.0.106-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet10-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"8.0.126-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet8-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:hummingbird:1"],"vendor":"Red Hat","product":"Red Hat Hardened Images","versions":[{"status":"unaffected","version":"9.0.116-1.hum1","lessThan":"*","versionType":"rpm"}],"packageName":"dotnet9-0-main","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"timeline":[{"lang":"en","time":"2026-04-13T08:04:44.681Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-04-14T18:41:05.485Z","value":"Made public."}],"solutions":[{"lang":"en","value":"RHSA-2026:13281: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:13280: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"},{"lang":"en","value":"RHSA-2026:8467: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8472: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"},{"lang":"en","value":"RHSA-2026:8473: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8468: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:8475: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"},{"lang":"en","value":"RHSA-2026:13693: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"},{"lang":"en","value":"RHSA-2026:13283: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:13282: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"},{"lang":"en","value":"RHSA-2026:8471: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8469: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:8474: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"},{"lang":"en","value":"RHSA-2026:9077: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9080: Red Hat Hardened Images"},{"lang":"en","value":"RHSA-2026:9205: Red Hat Hardened Images"}],"x_adpType":"supplier","datePublic":"2026-04-14T18:41:05.485Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-32178","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457781","name":"RHBZ#2457781","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32178.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13281","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13280","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8467","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8470","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8472","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8473","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8468","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8475","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13693","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13283","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13282","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8471","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8469","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8474","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9077","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9080","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9205","tags":["vendor-advisory","x_refsource_REDHAT"]}],"workarounds":[{"lang":"en","value":"Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security's standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available."}],"x_generator":{"engine":"sadp-cli 1.0.0"},"descriptions":[{"lang":"en","value":"A flaw was found in the .NET runtime (System.Net.Mail) in how email address data is parsed. Improper neutralization of special characters, specifically carriage return and line feed (CR/LF) sequences, may allow specially crafted email address input to be interpreted incorrectly. An attacker could exploit this issue to perform email spoofing by injecting additional headers or altering how the email address is processed during SMTP operations"}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-138","description":"Improper Neutralization of Special Elements"}]}],"providerMetadata":{"orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","shortName":"redhat-SADP","dateUpdated":"2026-07-15T01:08:27.670Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-15T15:52:47.483Z"}}},"related_cves":[{"value":"CVE-2026-32178","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:922f0159-f34f-4c55-9f69-f9c878f609a3","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-32178","advisory_id":"922f0159-f34f-4c55-9f69-f9c878f609a3","event_types":["advisory"],"published_at":"2026-10-25T07:54:17.199546+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-04-14T16:57:31.355+00:00","detail_url":"/events/29151"}]}},{"id":25851,"cve_ids":["CVE-2026-71328"],"payload":{"kind":"advisory","title":".NET and Visual Studio Remote Code Execution Vulnerability","summary":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","evidence":"cve:CVE-2026-71328","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-71328","aliases":["CVE-2026-71328"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.31","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:13:34.526Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-71328","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-09T04:18:27.816893Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-09T09:54:52.652Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:13:34.526Z"}}},"related_cves":[{"value":"CVE-2026-71328","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:7eae2236-b32a-4785-973d-75afbe22f84f","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-71328","advisory_id":"7eae2236-b32a-4785-973d-75afbe22f84f","event_types":["advisory"],"published_at":"2026-10-25T06:56:25.76723+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-08T17:18:10.094+00:00","detail_url":"/advisories/advisory%3A7eae2236-b32a-4785-973d-75afbe22f84f","group":{"id":"advisory:7eae2236-b32a-4785-973d-75afbe22f84f","revision":1,"primary_event_id":25668,"change":"published","superseded_by":[],"changed":{"id":25668,"cve_ids":["CVE-2026-71328"],"payload":{"kind":"advisory","title":".NET and Visual Studio Remote Code Execution Vulnerability","summary":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","evidence":"cve:CVE-2026-71328","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-71328","aliases":["CVE-2026-71328"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.31","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:13:34.526Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-71328","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-09T04:18:27.816893Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-09T09:54:52.652Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:13:34.526Z"}}},"related_cves":[{"value":"CVE-2026-71328","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:7eae2236-b32a-4785-973d-75afbe22f84f","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-71328","advisory_id":"7eae2236-b32a-4785-973d-75afbe22f84f","event_types":["advisory"],"published_at":"2026-10-25T06:56:25.76723+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-08T17:18:10.094+00:00","detail_url":"/events/25668"},"members":[{"id":25668,"cve_ids":["CVE-2026-71328"],"payload":{"kind":"advisory","title":".NET and Visual Studio Remote Code Execution Vulnerability","summary":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","evidence":"cve:CVE-2026-71328","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-71328","aliases":["CVE-2026-71328"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.31","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:13:34.526Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-71328","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-09T04:18:27.816893Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-09T09:54:52.652Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:13:34.526Z"}}},"related_cves":[{"value":"CVE-2026-71328","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:7eae2236-b32a-4785-973d-75afbe22f84f","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-71328","advisory_id":"7eae2236-b32a-4785-973d-75afbe22f84f","event_types":["advisory"],"published_at":"2026-10-25T06:56:25.76723+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-08T17:18:10.094+00:00","detail_url":"/events/25668"}]}},{"id":25803,"cve_ids":["CVE-2026-58649"],"payload":{"kind":"advisory","title":".NET Information Disclosure Vulnerability","summary":"Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.","evidence":"cve:CVE-2026-58649","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-58649","aliases":["CVE-2026-58649"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":6.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.111, 10.0.400","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.130, 8.0.424","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.120, 9.0.317","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:13:03.213Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58649"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-58649","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-08T19:45:24.737506Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-08T20:06:52.403Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:13:03.213Z"}}},"related_cves":[{"value":"CVE-2026-58649","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c88d7476-d0db-4c0c-9b76-3be247504d7b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58649","advisory_id":"c88d7476-d0db-4c0c-9b76-3be247504d7b","event_types":["advisory"],"published_at":"2026-10-25T06:55:10.83872+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-08T17:17:36.706+00:00","detail_url":"/advisories/advisory%3Ac88d7476-d0db-4c0c-9b76-3be247504d7b","group":{"id":"advisory:c88d7476-d0db-4c0c-9b76-3be247504d7b","revision":1,"primary_event_id":25617,"change":"published","superseded_by":[],"changed":{"id":25617,"cve_ids":["CVE-2026-58649"],"payload":{"kind":"advisory","title":".NET Information Disclosure Vulnerability","summary":"Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.","evidence":"cve:CVE-2026-58649","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-58649","aliases":["CVE-2026-58649"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":6.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.111, 10.0.400","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.130, 8.0.424","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.120, 9.0.317","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:13:03.213Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58649"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-58649","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-08T19:45:24.737506Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-08T20:06:52.403Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:13:03.213Z"}}},"related_cves":[{"value":"CVE-2026-58649","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c88d7476-d0db-4c0c-9b76-3be247504d7b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58649","advisory_id":"c88d7476-d0db-4c0c-9b76-3be247504d7b","event_types":["advisory"],"published_at":"2026-10-25T06:55:10.83872+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-08T17:17:36.706+00:00","detail_url":"/events/25617"},"members":[{"id":25617,"cve_ids":["CVE-2026-58649"],"payload":{"kind":"advisory","title":".NET Information Disclosure Vulnerability","summary":"Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.","evidence":"cve:CVE-2026-58649","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-58649","aliases":["CVE-2026-58649"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":6.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.111, 10.0.400","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.130, 8.0.424","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.120, 9.0.317","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:13:03.213Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58649"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-58649","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-08T19:45:24.737506Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-08T20:06:52.403Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:13:03.213Z"}}},"related_cves":[{"value":"CVE-2026-58649","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c88d7476-d0db-4c0c-9b76-3be247504d7b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58649","advisory_id":"c88d7476-d0db-4c0c-9b76-3be247504d7b","event_types":["advisory"],"published_at":"2026-10-25T06:55:10.83872+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-08T17:17:36.706+00:00","detail_url":"/events/25617"}]}},{"id":24855,"cve_ids":["CVE-2026-69522"],"payload":{"kind":"advisory","title":".NET and Visual Studio Remote Code Execution Vulnerability","summary":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","evidence":"cve:CVE-2026-69522","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-69522","aliases":["CVE-2026-69522"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.31","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"3.0.0.0","lessThan":"2.0.50727.8984 & 3.0.30729.8980 & 4.7.4145.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2016"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.7.4145.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2019"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.8.4806.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2022"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9183 & 3.0.30729.9169 & 4.8.9347.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows Server 2022","Windows Server 2025"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4145.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 R2"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4806.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 R2","Windows Server 2016"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9347.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:05:31.009Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-69522","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-03T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-09T04:18:24.536Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:05:31.009Z"}}},"related_cves":[{"value":"CVE-2026-69522","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f01f87ec-9c91-4b6c-b30b-78450be8916c","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-69522","advisory_id":"f01f87ec-9c91-4b6c-b30b-78450be8916c","event_types":["advisory"],"published_at":"2026-10-25T06:39:50.850706+00:00","technologies":["core-cve","microsoft-net-framework-3-5-and-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-08T17:10:32.415+00:00","detail_url":"/advisories/advisory%3Af01f87ec-9c91-4b6c-b30b-78450be8916c","group":{"id":"advisory:f01f87ec-9c91-4b6c-b30b-78450be8916c","revision":1,"primary_event_id":24684,"change":"published","superseded_by":[],"changed":{"id":24684,"cve_ids":["CVE-2026-69522"],"payload":{"kind":"advisory","title":".NET and Visual Studio Remote Code Execution Vulnerability","summary":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","evidence":"cve:CVE-2026-69522","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-69522","aliases":["CVE-2026-69522"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.31","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"3.0.0.0","lessThan":"2.0.50727.8984 & 3.0.30729.8980 & 4.7.4145.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2016"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.7.4145.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2019"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.8.4806.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2022"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9183 & 3.0.30729.9169 & 4.8.9347.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows Server 2022","Windows Server 2025"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4145.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 R2"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4806.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 R2","Windows Server 2016"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9347.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:05:31.009Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-69522","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-03T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-09T04:18:24.536Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:05:31.009Z"}}},"related_cves":[{"value":"CVE-2026-69522","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f01f87ec-9c91-4b6c-b30b-78450be8916c","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-69522","advisory_id":"f01f87ec-9c91-4b6c-b30b-78450be8916c","event_types":["advisory"],"published_at":"2026-10-25T06:39:50.850706+00:00","technologies":["core-cve","microsoft-net-framework-3-5-and-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-08T17:10:32.415+00:00","detail_url":"/events/24684"},"members":[{"id":24684,"cve_ids":["CVE-2026-69522"],"payload":{"kind":"advisory","title":".NET and Visual Studio Remote Code Execution Vulnerability","summary":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","evidence":"cve:CVE-2026-69522","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 11.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.9","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-69522","aliases":["CVE-2026-69522"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.12","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 11.0","versions":[{"status":"affected","version":"11.0.0","lessThan":"11.0 RC1","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.31","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.20","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"3.0.0.0","lessThan":"2.0.50727.8984 & 3.0.30729.8980 & 4.7.4145.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2016"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.7.4145.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2019"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9070 & 3.0.30729.9068 & 4.8.4806.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2022"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9183 & 3.0.30729.9169 & 4.8.9347.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows Server 2022","Windows Server 2025"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4145.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 R2"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4806.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 R2","Windows Server 2016"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9347.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.40","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.9","versions":[{"status":"affected","version":"18.9.0","lessThan":"18.9.3","versionType":"custom"}]}],"modified":"2026-10-14T23:05:31.009Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-69522","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-03T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-09T04:18:24.536Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-14T23:05:31.009Z"}}},"related_cves":[{"value":"CVE-2026-69522","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f01f87ec-9c91-4b6c-b30b-78450be8916c","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-69522","advisory_id":"f01f87ec-9c91-4b6c-b30b-78450be8916c","event_types":["advisory"],"published_at":"2026-10-25T06:39:50.850706+00:00","technologies":["core-cve","microsoft-net-framework-3-5-and-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-9","net-10-0","net-11-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-08T17:10:32.415+00:00","detail_url":"/events/24684"}]}},{"id":15620,"cve_ids":["CVE-2026-57108"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-57108","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-57108","aliases":["CVE-2026-57108"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]}],"modified":"2026-10-08T18:17:33.654Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-57108","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T18:01:16.350363Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T18:01:24.689Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:17:33.654Z"}}},"related_cves":[{"value":"CVE-2026-57108","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:9932f7a0-9243-4c1a-b178-15e2f673ac52","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-57108","advisory_id":"9932f7a0-9243-4c1a-b178-15e2f673ac52","event_types":["advisory"],"published_at":"2026-10-25T01:01:46.867968+00:00","technologies":["core-cve","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T17:09:39.087+00:00","detail_url":"/advisories/advisory%3A9932f7a0-9243-4c1a-b178-15e2f673ac52","group":{"id":"advisory:9932f7a0-9243-4c1a-b178-15e2f673ac52","revision":1,"primary_event_id":15533,"change":"published","superseded_by":[],"changed":{"id":15533,"cve_ids":["CVE-2026-57108"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-57108","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-57108","aliases":["CVE-2026-57108"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]}],"modified":"2026-10-08T18:17:33.654Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-57108","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T18:01:16.350363Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T18:01:24.689Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:17:33.654Z"}}},"related_cves":[{"value":"CVE-2026-57108","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:9932f7a0-9243-4c1a-b178-15e2f673ac52","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-57108","advisory_id":"9932f7a0-9243-4c1a-b178-15e2f673ac52","event_types":["advisory"],"published_at":"2026-10-25T01:01:46.867968+00:00","technologies":["core-cve","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T17:09:39.087+00:00","detail_url":"/events/15533"},"members":[{"id":15533,"cve_ids":["CVE-2026-57108"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-57108","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-57108","aliases":["CVE-2026-57108"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]}],"modified":"2026-10-08T18:17:33.654Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-57108","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T18:01:16.350363Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T18:01:24.689Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:17:33.654Z"}}},"related_cves":[{"value":"CVE-2026-57108","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:9932f7a0-9243-4c1a-b178-15e2f673ac52","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-57108","advisory_id":"9932f7a0-9243-4c1a-b178-15e2f673ac52","event_types":["advisory"],"published_at":"2026-10-25T01:01:46.867968+00:00","technologies":["core-cve","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T17:09:39.087+00:00","detail_url":"/events/15533"}]}},{"id":15568,"cve_ids":["CVE-2026-56170"],"payload":{"kind":"advisory","title":"ASP.NET Core Denial of Service Vulnerability","summary":"Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-56170","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-56170","aliases":["CVE-2026-56170"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]}],"modified":"2026-10-08T18:13:25.565Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-56170","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T17:49:27.269476Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T17:58:07.274Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:13:25.565Z"}}},"related_cves":[{"value":"CVE-2026-56170","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:203518de-f9e7-4d1c-9c8a-396baacca844","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56170","advisory_id":"203518de-f9e7-4d1c-9c8a-396baacca844","event_types":["advisory"],"published_at":"2026-10-25T01:00:02.548744+00:00","technologies":["core-cve","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T17:05:13.486+00:00","detail_url":"/advisories/advisory%3A203518de-f9e7-4d1c-9c8a-396baacca844","group":{"id":"advisory:203518de-f9e7-4d1c-9c8a-396baacca844","revision":1,"primary_event_id":15482,"change":"published","superseded_by":[],"changed":{"id":15482,"cve_ids":["CVE-2026-56170"],"payload":{"kind":"advisory","title":"ASP.NET Core Denial of Service Vulnerability","summary":"Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-56170","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-56170","aliases":["CVE-2026-56170"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]}],"modified":"2026-10-08T18:13:25.565Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-56170","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T17:49:27.269476Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T17:58:07.274Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:13:25.565Z"}}},"related_cves":[{"value":"CVE-2026-56170","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:203518de-f9e7-4d1c-9c8a-396baacca844","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56170","advisory_id":"203518de-f9e7-4d1c-9c8a-396baacca844","event_types":["advisory"],"published_at":"2026-10-25T01:00:02.548744+00:00","technologies":["core-cve","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T17:05:13.486+00:00","detail_url":"/events/15482"},"members":[{"id":15482,"cve_ids":["CVE-2026-56170"],"payload":{"kind":"advisory","title":"ASP.NET Core Denial of Service Vulnerability","summary":"Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-56170","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-56170","aliases":["CVE-2026-56170"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]}],"modified":"2026-10-08T18:13:25.565Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-56170","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T17:49:27.269476Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T17:58:07.274Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:13:25.565Z"}}},"related_cves":[{"value":"CVE-2026-56170","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:203518de-f9e7-4d1c-9c8a-396baacca844","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56170","advisory_id":"203518de-f9e7-4d1c-9c8a-396baacca844","event_types":["advisory"],"published_at":"2026-10-25T01:00:02.548744+00:00","technologies":["core-cve","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T17:05:13.486+00:00","detail_url":"/events/15482"}]}},{"id":13518,"cve_ids":["CVE-2026-50659"],"payload":{"kind":"advisory","title":".NET Spoofing Vulnerability","summary":"Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.","evidence":"cve:CVE-2026-50659","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-50659","aliases":["CVE-2026-50659"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":6.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8983 & 3.0.30729.8978","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9340.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:08.186Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50659","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:32:29.416499Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:09.399Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:08.186Z"}}},"related_cves":[{"value":"CVE-2026-50659","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6aa1989b-1415-4e57-a800-b32b0646b184","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50659","advisory_id":"6aa1989b-1415-4e57-a800-b32b0646b184","event_types":["advisory"],"published_at":"2026-10-25T00:24:19.763505+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:40:15.949+00:00","detail_url":"/advisories/advisory%3A6aa1989b-1415-4e57-a800-b32b0646b184","group":{"id":"advisory:6aa1989b-1415-4e57-a800-b32b0646b184","revision":1,"primary_event_id":13445,"change":"published","superseded_by":[],"changed":{"id":13445,"cve_ids":["CVE-2026-50659"],"payload":{"kind":"advisory","title":".NET Spoofing Vulnerability","summary":"Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.","evidence":"cve:CVE-2026-50659","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-50659","aliases":["CVE-2026-50659"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":6.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8983 & 3.0.30729.8978","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9340.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:08.186Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50659","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:32:29.416499Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:09.399Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:08.186Z"}}},"related_cves":[{"value":"CVE-2026-50659","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6aa1989b-1415-4e57-a800-b32b0646b184","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50659","advisory_id":"6aa1989b-1415-4e57-a800-b32b0646b184","event_types":["advisory"],"published_at":"2026-10-25T00:24:19.763505+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:40:15.949+00:00","detail_url":"/events/13445"},"members":[{"id":13445,"cve_ids":["CVE-2026-50659"],"payload":{"kind":"advisory","title":".NET Spoofing Vulnerability","summary":"Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.","evidence":"cve:CVE-2026-50659","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-50659","aliases":["CVE-2026-50659"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":6.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8983 & 3.0.30729.8978","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9340.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:08.186Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50659","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:32:29.416499Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:09.399Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:08.186Z"}}},"related_cves":[{"value":"CVE-2026-50659","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6aa1989b-1415-4e57-a800-b32b0646b184","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50659","advisory_id":"6aa1989b-1415-4e57-a800-b32b0646b184","event_types":["advisory"],"published_at":"2026-10-25T00:24:19.763505+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:40:15.949+00:00","detail_url":"/events/13445"}]}},{"id":13513,"cve_ids":["CVE-2026-50651"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-50651","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50651","aliases":["CVE-2026-50651"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:06.165Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50651"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50651","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:36:47.942941Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:09.540Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:06.165Z"}}},"related_cves":[{"value":"CVE-2026-50651","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e5c19fdb-1fbc-46f7-ae1d-ec847e4bdc81","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50651","advisory_id":"e5c19fdb-1fbc-46f7-ae1d-ec847e4bdc81","event_types":["advisory"],"published_at":"2026-10-25T00:24:17.436397+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:40:13.75+00:00","detail_url":"/advisories/advisory%3Ae5c19fdb-1fbc-46f7-ae1d-ec847e4bdc81","group":{"id":"advisory:e5c19fdb-1fbc-46f7-ae1d-ec847e4bdc81","revision":1,"primary_event_id":13440,"change":"published","superseded_by":[],"changed":{"id":13440,"cve_ids":["CVE-2026-50651"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-50651","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50651","aliases":["CVE-2026-50651"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:06.165Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50651"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50651","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:36:47.942941Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:09.540Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:06.165Z"}}},"related_cves":[{"value":"CVE-2026-50651","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e5c19fdb-1fbc-46f7-ae1d-ec847e4bdc81","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50651","advisory_id":"e5c19fdb-1fbc-46f7-ae1d-ec847e4bdc81","event_types":["advisory"],"published_at":"2026-10-25T00:24:17.436397+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:40:13.75+00:00","detail_url":"/events/13440"},"members":[{"id":13440,"cve_ids":["CVE-2026-50651"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-50651","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50651","aliases":["CVE-2026-50651"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:06.165Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50651"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50651","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:36:47.942941Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:09.540Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:06.165Z"}}},"related_cves":[{"value":"CVE-2026-50651","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e5c19fdb-1fbc-46f7-ae1d-ec847e4bdc81","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50651","advisory_id":"e5c19fdb-1fbc-46f7-ae1d-ec847e4bdc81","event_types":["advisory"],"published_at":"2026-10-25T00:24:17.436397+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:40:13.75+00:00","detail_url":"/events/13440"}]}},{"id":13511,"cve_ids":["CVE-2026-50648"],"payload":{"kind":"advisory","title":".NET Framework Denial of Service Vulnerability","summary":"Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-50648","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50648","aliases":["CVE-2026-50648"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8983 & 3.0.30729.8978","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:04.560Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50648","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:33:05.634179Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:09.679Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:04.560Z"}}},"related_cves":[{"value":"CVE-2026-50648","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:717bd4d1-4887-4143-9e2b-6c934931e218","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50648","advisory_id":"717bd4d1-4887-4143-9e2b-6c934931e218","event_types":["advisory"],"published_at":"2026-10-25T00:24:16.324743+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:57.312+00:00","detail_url":"/advisories/advisory%3A717bd4d1-4887-4143-9e2b-6c934931e218","group":{"id":"advisory:717bd4d1-4887-4143-9e2b-6c934931e218","revision":1,"primary_event_id":13438,"change":"published","superseded_by":[],"changed":{"id":13438,"cve_ids":["CVE-2026-50648"],"payload":{"kind":"advisory","title":".NET Framework Denial of Service Vulnerability","summary":"Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-50648","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50648","aliases":["CVE-2026-50648"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8983 & 3.0.30729.8978","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:04.560Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50648","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:33:05.634179Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:09.679Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:04.560Z"}}},"related_cves":[{"value":"CVE-2026-50648","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:717bd4d1-4887-4143-9e2b-6c934931e218","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50648","advisory_id":"717bd4d1-4887-4143-9e2b-6c934931e218","event_types":["advisory"],"published_at":"2026-10-25T00:24:16.324743+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:57.312+00:00","detail_url":"/events/13438"},"members":[{"id":13438,"cve_ids":["CVE-2026-50648"],"payload":{"kind":"advisory","title":".NET Framework Denial of Service Vulnerability","summary":"Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-50648","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50648","aliases":["CVE-2026-50648"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8983 & 3.0.30729.8978","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for ARM64-based Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:04.560Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50648","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:33:05.634179Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:09.679Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:04.560Z"}}},"related_cves":[{"value":"CVE-2026-50648","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:717bd4d1-4887-4143-9e2b-6c934931e218","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50648","advisory_id":"717bd4d1-4887-4143-9e2b-6c934931e218","event_types":["advisory"],"published_at":"2026-10-25T00:24:16.324743+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:57.312+00:00","detail_url":"/events/13438"}]}},{"id":13507,"cve_ids":["CVE-2026-50528"],"payload":{"kind":"advisory","title":".NET Security Feature Bypass Vulnerability","summary":"Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.","evidence":"cve:CVE-2026-50528","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50528","aliases":["CVE-2026-50528"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.2,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:02.964Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50528","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-15T14:23:31.469063Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-15T14:24:22.628Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:02.964Z"}}},"related_cves":[{"value":"CVE-2026-50528","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a94aa50b-c9ff-4202-bb3d-bbcc30c34bc5","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50528","advisory_id":"a94aa50b-c9ff-4202-bb3d-bbcc30c34bc5","event_types":["advisory"],"published_at":"2026-10-25T00:24:13.861682+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:56.224+00:00","detail_url":"/advisories/advisory%3Aa94aa50b-c9ff-4202-bb3d-bbcc30c34bc5","group":{"id":"advisory:a94aa50b-c9ff-4202-bb3d-bbcc30c34bc5","revision":1,"primary_event_id":13434,"change":"published","superseded_by":[],"changed":{"id":13434,"cve_ids":["CVE-2026-50528"],"payload":{"kind":"advisory","title":".NET Security Feature Bypass Vulnerability","summary":"Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.","evidence":"cve:CVE-2026-50528","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50528","aliases":["CVE-2026-50528"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.2,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:02.964Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50528","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-15T14:23:31.469063Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-15T14:24:22.628Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:02.964Z"}}},"related_cves":[{"value":"CVE-2026-50528","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a94aa50b-c9ff-4202-bb3d-bbcc30c34bc5","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50528","advisory_id":"a94aa50b-c9ff-4202-bb3d-bbcc30c34bc5","event_types":["advisory"],"published_at":"2026-10-25T00:24:13.861682+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:56.224+00:00","detail_url":"/events/13434"},"members":[{"id":13434,"cve_ids":["CVE-2026-50528"],"payload":{"kind":"advisory","title":".NET Security Feature Bypass Vulnerability","summary":"Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.","evidence":"cve:CVE-2026-50528","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50528","aliases":["CVE-2026-50528"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.2,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:02.964Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50528","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-15T14:23:31.469063Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-15T14:24:22.628Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:02.964Z"}}},"related_cves":[{"value":"CVE-2026-50528","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a94aa50b-c9ff-4202-bb3d-bbcc30c34bc5","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50528","advisory_id":"a94aa50b-c9ff-4202-bb3d-bbcc30c34bc5","event_types":["advisory"],"published_at":"2026-10-25T00:24:13.861682+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:56.224+00:00","detail_url":"/events/13434"}]}},{"id":13506,"cve_ids":["CVE-2026-50527"],"payload":{"kind":"advisory","title":".NET Framework Denial of Service Vulnerability","summary":"Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-50527","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50527","aliases":["CVE-2026-50527"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8983 & 3.0.30729.8978","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:02.521Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50527","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:36:38.463480Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:09.823Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:02.521Z"}}},"related_cves":[{"value":"CVE-2026-50527","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:50f16b20-8bd0-4200-ab22-b34f4e821ac2","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50527","advisory_id":"50f16b20-8bd0-4200-ab22-b34f4e821ac2","event_types":["advisory"],"published_at":"2026-10-25T00:24:13.104781+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:55.564+00:00","detail_url":"/advisories/advisory%3A50f16b20-8bd0-4200-ab22-b34f4e821ac2","group":{"id":"advisory:50f16b20-8bd0-4200-ab22-b34f4e821ac2","revision":1,"primary_event_id":13433,"change":"published","superseded_by":[],"changed":{"id":13433,"cve_ids":["CVE-2026-50527"],"payload":{"kind":"advisory","title":".NET Framework Denial of Service Vulnerability","summary":"Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-50527","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50527","aliases":["CVE-2026-50527"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8983 & 3.0.30729.8978","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:02.521Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50527","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:36:38.463480Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:09.823Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:02.521Z"}}},"related_cves":[{"value":"CVE-2026-50527","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:50f16b20-8bd0-4200-ab22-b34f4e821ac2","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50527","advisory_id":"50f16b20-8bd0-4200-ab22-b34f4e821ac2","event_types":["advisory"],"published_at":"2026-10-25T00:24:13.104781+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:55.564+00:00","detail_url":"/events/13433"},"members":[{"id":13433,"cve_ids":["CVE-2026-50527"],"payload":{"kind":"advisory","title":".NET Framework Denial of Service Vulnerability","summary":"Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-50527","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50527","aliases":["CVE-2026-50527"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8983 & 3.0.30729.8978","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:02.521Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50527","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:36:38.463480Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:09.823Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:02.521Z"}}},"related_cves":[{"value":"CVE-2026-50527","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:50f16b20-8bd0-4200-ab22-b34f4e821ac2","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50527","advisory_id":"50f16b20-8bd0-4200-ab22-b34f4e821ac2","event_types":["advisory"],"published_at":"2026-10-25T00:24:13.104781+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:55.564+00:00","detail_url":"/events/13433"}]}},{"id":13505,"cve_ids":["CVE-2026-50526"],"payload":{"kind":"advisory","title":".NET Tampering Vulnerability","summary":"Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.","evidence":"cve:CVE-2026-50526","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50526","aliases":["CVE-2026-50526"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:01.903Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50526","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-07-15T03:59:34.142603Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-15T10:37:24.524Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:01.903Z"}}},"related_cves":[{"value":"CVE-2026-50526","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:3421aab9-1cbb-4584-a86f-e9c2b0dc6c7f","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50526","advisory_id":"3421aab9-1cbb-4584-a86f-e9c2b0dc6c7f","event_types":["advisory"],"published_at":"2026-10-25T00:24:12.539569+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:54.992+00:00","detail_url":"/advisories/advisory%3A3421aab9-1cbb-4584-a86f-e9c2b0dc6c7f","group":{"id":"advisory:3421aab9-1cbb-4584-a86f-e9c2b0dc6c7f","revision":1,"primary_event_id":13432,"change":"published","superseded_by":[],"changed":{"id":13432,"cve_ids":["CVE-2026-50526"],"payload":{"kind":"advisory","title":".NET Tampering Vulnerability","summary":"Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.","evidence":"cve:CVE-2026-50526","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50526","aliases":["CVE-2026-50526"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:01.903Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50526","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-07-15T03:59:34.142603Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-15T10:37:24.524Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:01.903Z"}}},"related_cves":[{"value":"CVE-2026-50526","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:3421aab9-1cbb-4584-a86f-e9c2b0dc6c7f","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50526","advisory_id":"3421aab9-1cbb-4584-a86f-e9c2b0dc6c7f","event_types":["advisory"],"published_at":"2026-10-25T00:24:12.539569+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:54.992+00:00","detail_url":"/events/13432"},"members":[{"id":13432,"cve_ids":["CVE-2026-50526"],"payload":{"kind":"advisory","title":".NET Tampering Vulnerability","summary":"Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.","evidence":"cve:CVE-2026-50526","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50526","aliases":["CVE-2026-50526"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:01.903Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50526","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-07-15T03:59:34.142603Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-15T10:37:24.524Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:01.903Z"}}},"related_cves":[{"value":"CVE-2026-50526","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:3421aab9-1cbb-4584-a86f-e9c2b0dc6c7f","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50526","advisory_id":"3421aab9-1cbb-4584-a86f-e9c2b0dc6c7f","event_types":["advisory"],"published_at":"2026-10-25T00:24:12.539569+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:54.992+00:00","detail_url":"/events/13432"}]}},{"id":13504,"cve_ids":["CVE-2026-50525"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-50525","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50525","aliases":["CVE-2026-50525"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.9182 & 3.0.30729.9168","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9340.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:01.368Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50525","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:33:59.887618Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:09.961Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:01.368Z"}}},"related_cves":[{"value":"CVE-2026-50525","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f1ec5bc4-643e-4153-9ced-a54c37141c31","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50525","advisory_id":"f1ec5bc4-643e-4153-9ced-a54c37141c31","event_types":["advisory"],"published_at":"2026-10-25T00:24:11.937053+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:54.357+00:00","detail_url":"/advisories/advisory%3Af1ec5bc4-643e-4153-9ced-a54c37141c31","group":{"id":"advisory:f1ec5bc4-643e-4153-9ced-a54c37141c31","revision":1,"primary_event_id":13431,"change":"published","superseded_by":[],"changed":{"id":13431,"cve_ids":["CVE-2026-50525"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-50525","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50525","aliases":["CVE-2026-50525"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.9182 & 3.0.30729.9168","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9340.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:01.368Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50525","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:33:59.887618Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:09.961Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:01.368Z"}}},"related_cves":[{"value":"CVE-2026-50525","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f1ec5bc4-643e-4153-9ced-a54c37141c31","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50525","advisory_id":"f1ec5bc4-643e-4153-9ced-a54c37141c31","event_types":["advisory"],"published_at":"2026-10-25T00:24:11.937053+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:54.357+00:00","detail_url":"/events/13431"},"members":[{"id":13431,"cve_ids":["CVE-2026-50525"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-50525","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50525","aliases":["CVE-2026-50525"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.9182 & 3.0.30729.9168","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9340.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:16:01.368Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50525","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:33:59.887618Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:09.961Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:16:01.368Z"}}},"related_cves":[{"value":"CVE-2026-50525","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f1ec5bc4-643e-4153-9ced-a54c37141c31","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50525","advisory_id":"f1ec5bc4-643e-4153-9ced-a54c37141c31","event_types":["advisory"],"published_at":"2026-10-25T00:24:11.937053+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:54.357+00:00","detail_url":"/events/13431"}]}},{"id":13503,"cve_ids":["CVE-2026-50524"],"payload":{"kind":"advisory","title":".NET Framework Denial of Service Vulnerability","summary":"Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-50524","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50524","aliases":["CVE-2026-50524"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:13:17.609Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50524","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:34:12.688606Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:10.103Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:13:17.609Z"}}},"related_cves":[{"value":"CVE-2026-50524","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:1d5300a1-b0bb-417d-beeb-04e55ca83a56","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50524","advisory_id":"1d5300a1-b0bb-417d-beeb-04e55ca83a56","event_types":["advisory"],"published_at":"2026-10-25T00:24:11.204779+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:53.872+00:00","detail_url":"/advisories/advisory%3A1d5300a1-b0bb-417d-beeb-04e55ca83a56","group":{"id":"advisory:1d5300a1-b0bb-417d-beeb-04e55ca83a56","revision":1,"primary_event_id":13430,"change":"published","superseded_by":[],"changed":{"id":13430,"cve_ids":["CVE-2026-50524"],"payload":{"kind":"advisory","title":".NET Framework Denial of Service Vulnerability","summary":"Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-50524","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50524","aliases":["CVE-2026-50524"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:13:17.609Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50524","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:34:12.688606Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:10.103Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:13:17.609Z"}}},"related_cves":[{"value":"CVE-2026-50524","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:1d5300a1-b0bb-417d-beeb-04e55ca83a56","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50524","advisory_id":"1d5300a1-b0bb-417d-beeb-04e55ca83a56","event_types":["advisory"],"published_at":"2026-10-25T00:24:11.204779+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:53.872+00:00","detail_url":"/events/13430"},"members":[{"id":13430,"cve_ids":["CVE-2026-50524"],"payload":{"kind":"advisory","title":".NET Framework Denial of Service Vulnerability","summary":"Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-50524","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-50524","aliases":["CVE-2026-50524"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:13:17.609Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-50524","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:34:12.688606Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:10.103Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:13:17.609Z"}}},"related_cves":[{"value":"CVE-2026-50524","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:1d5300a1-b0bb-417d-beeb-04e55ca83a56","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50524","advisory_id":"1d5300a1-b0bb-417d-beeb-04e55ca83a56","event_types":["advisory"],"published_at":"2026-10-25T00:24:11.204779+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T19:29:53.872+00:00","detail_url":"/events/13430"}]}},{"id":13234,"cve_ids":["CVE-2026-47303"],"payload":{"kind":"advisory","title":"ASP.NET Core Elevation of Privilege Vulnerability","summary":"Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.","evidence":"cve:CVE-2026-47303","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-47303","aliases":["CVE-2026-47303"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:12:46.158Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-47303","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-07-13T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-15T03:57:39.744Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:12:46.158Z"}}},"related_cves":[{"value":"CVE-2026-47303","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:4e78772f-6685-4b47-9e1d-3259fa47fbe9","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-47303","advisory_id":"4e78772f-6685-4b47-9e1d-3259fa47fbe9","event_types":["advisory"],"published_at":"2026-10-25T00:19:11.241194+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T18:45:33.438+00:00","detail_url":"/advisories/advisory%3A4e78772f-6685-4b47-9e1d-3259fa47fbe9","group":{"id":"advisory:4e78772f-6685-4b47-9e1d-3259fa47fbe9","revision":1,"primary_event_id":13165,"change":"published","superseded_by":[],"changed":{"id":13165,"cve_ids":["CVE-2026-47303"],"payload":{"kind":"advisory","title":"ASP.NET Core Elevation of Privilege Vulnerability","summary":"Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.","evidence":"cve:CVE-2026-47303","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-47303","aliases":["CVE-2026-47303"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:12:46.158Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-47303","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-07-13T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-15T03:57:39.744Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:12:46.158Z"}}},"related_cves":[{"value":"CVE-2026-47303","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:4e78772f-6685-4b47-9e1d-3259fa47fbe9","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-47303","advisory_id":"4e78772f-6685-4b47-9e1d-3259fa47fbe9","event_types":["advisory"],"published_at":"2026-10-25T00:19:11.241194+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T18:45:33.438+00:00","detail_url":"/events/13165"},"members":[{"id":13165,"cve_ids":["CVE-2026-47303"],"payload":{"kind":"advisory","title":"ASP.NET Core Elevation of Privilege Vulnerability","summary":"Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.","evidence":"cve:CVE-2026-47303","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-47303","aliases":["CVE-2026-47303"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:12:46.158Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-47303","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-07-13T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-15T03:57:39.744Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:12:46.158Z"}}},"related_cves":[{"value":"CVE-2026-47303","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:4e78772f-6685-4b47-9e1d-3259fa47fbe9","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-47303","advisory_id":"4e78772f-6685-4b47-9e1d-3259fa47fbe9","event_types":["advisory"],"published_at":"2026-10-25T00:19:11.241194+00:00","technologies":["core-cve","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T18:45:33.438+00:00","detail_url":"/events/13165"}]}},{"id":13232,"cve_ids":["CVE-2026-47304"],"payload":{"kind":"advisory","title":".NET Security Feature Bypass Vulnerability","summary":"Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.","evidence":"cve:CVE-2026-47304","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.5","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-47304","aliases":["CVE-2026-47304"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.1,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8983 & 3.0.30729.8978","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)","Windows Server 2025","Windows Server 2025 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9340.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)","versions":[{"status":"affected","version":"-"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)","versions":[{"status":"affected","version":"-"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.5","versions":[{"status":"affected","version":"-"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:13:58.888Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-47304","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-07-15T03:57:19.256900Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-15T11:00:31.257Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:13:58.888Z"}}},"related_cves":[{"value":"CVE-2026-47304","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:95bbbc72-558c-4c8f-9de1-3aa40ad21a75","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-47304","advisory_id":"95bbbc72-558c-4c8f-9de1-3aa40ad21a75","event_types":["advisory"],"published_at":"2026-10-25T00:19:10.099936+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2017-version-15-9-includes-15-0-15-8","microsoft-visual-studio-2019-version-16-11-includes-16-0-16-10","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-5","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T18:45:33.914+00:00","detail_url":"/advisories/advisory%3A95bbbc72-558c-4c8f-9de1-3aa40ad21a75","group":{"id":"advisory:95bbbc72-558c-4c8f-9de1-3aa40ad21a75","revision":1,"primary_event_id":13163,"change":"published","superseded_by":[],"changed":{"id":13163,"cve_ids":["CVE-2026-47304"],"payload":{"kind":"advisory","title":".NET Security Feature Bypass Vulnerability","summary":"Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.","evidence":"cve:CVE-2026-47304","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.5","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-47304","aliases":["CVE-2026-47304"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.1,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8983 & 3.0.30729.8978","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)","Windows Server 2025","Windows Server 2025 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9340.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)","versions":[{"status":"affected","version":"-"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)","versions":[{"status":"affected","version":"-"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.5","versions":[{"status":"affected","version":"-"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:13:58.888Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-47304","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-07-15T03:57:19.256900Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-15T11:00:31.257Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:13:58.888Z"}}},"related_cves":[{"value":"CVE-2026-47304","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:95bbbc72-558c-4c8f-9de1-3aa40ad21a75","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-47304","advisory_id":"95bbbc72-558c-4c8f-9de1-3aa40ad21a75","event_types":["advisory"],"published_at":"2026-10-25T00:19:10.099936+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2017-version-15-9-includes-15-0-15-8","microsoft-visual-studio-2019-version-16-11-includes-16-0-16-10","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-5","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T18:45:33.914+00:00","detail_url":"/events/13163"},"members":[{"id":13163,"cve_ids":["CVE-2026-47304"],"payload":{"kind":"advisory","title":".NET Security Feature Bypass Vulnerability","summary":"Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.","evidence":"cve:CVE-2026-47304","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8.1","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.5","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-47304","aliases":["CVE-2026-47304"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.1,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8983 & 3.0.30729.8978","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)","Windows Server 2025","Windows Server 2025 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8.1","versions":[{"status":"affected","version":"4.8.0.0","lessThan":"4.8.9340.0","versionType":"custom"}],"platforms":["Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)","versions":[{"status":"affected","version":"-"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)","versions":[{"status":"affected","version":"-"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.5","versions":[{"status":"affected","version":"-"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:13:58.888Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-47304","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-07-15T03:57:19.256900Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-15T11:00:31.257Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:13:58.888Z"}}},"related_cves":[{"value":"CVE-2026-47304","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:95bbbc72-558c-4c8f-9de1-3aa40ad21a75","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-47304","advisory_id":"95bbbc72-558c-4c8f-9de1-3aa40ad21a75","event_types":["advisory"],"published_at":"2026-10-25T00:19:10.099936+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-net-framework-4-8-1","microsoft-visual-studio-2017-version-15-9-includes-15-0-15-8","microsoft-visual-studio-2019-version-16-11-includes-16-0-16-10","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-5","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T18:45:33.914+00:00","detail_url":"/events/13163"}]}},{"id":13231,"cve_ids":["CVE-2026-47302"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-47302","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-47302","aliases":["CVE-2026-47302"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8983 & 3.0.30729.8978","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:12:45.566Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-47302","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:34:26.536141Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:10.245Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:12:45.566Z"}}},"related_cves":[{"value":"CVE-2026-47302","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:8ad20b50-a062-4153-b622-0b5ea26bfee4","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-47302","advisory_id":"8ad20b50-a062-4153-b622-0b5ea26bfee4","event_types":["advisory"],"published_at":"2026-10-25T00:19:09.539106+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T18:45:32.796+00:00","detail_url":"/advisories/advisory%3A8ad20b50-a062-4153-b622-0b5ea26bfee4","group":{"id":"advisory:8ad20b50-a062-4153-b622-0b5ea26bfee4","revision":1,"primary_event_id":13162,"change":"published","superseded_by":[],"changed":{"id":13162,"cve_ids":["CVE-2026-47302"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-47302","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-47302","aliases":["CVE-2026-47302"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8983 & 3.0.30729.8978","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:12:45.566Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-47302","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:34:26.536141Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:10.245Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:12:45.566Z"}}},"related_cves":[{"value":"CVE-2026-47302","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:8ad20b50-a062-4153-b622-0b5ea26bfee4","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-47302","advisory_id":"8ad20b50-a062-4153-b622-0b5ea26bfee4","event_types":["advisory"],"published_at":"2026-10-25T00:19:09.539106+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T18:45:32.796+00:00","detail_url":"/events/13162"},"members":[{"id":13162,"cve_ids":["CVE-2026-47302"],"payload":{"kind":"advisory","title":".NET Denial of Service Vulnerability","summary":"Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.","evidence":"cve:CVE-2026-47302","products":[{"name":{"value":".NET 10.0","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 8.0","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":".NET 9.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.7.2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 3.5 AND 4.8.1","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft .NET Framework 4.8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.12","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2022 version 17.14","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Microsoft Visual Studio 2026 version 18.7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-47302","aliases":["CVE-2026-47302"],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"affected":[{"vendor":"Microsoft","product":".NET 10.0","versions":[{"status":"affected","version":"10.0.0","lessThan":"10.0.10","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"status":"affected","version":"8.0.0","lessThan":"8.0.29","versionType":"custom"}]},{"vendor":"Microsoft","product":".NET 9.0","versions":[{"status":"affected","version":"9.0.0","lessThan":"9.0.18","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[{"status":"affected","version":"3.5.0","lessThan":"2.0.50727.8983 & 3.0.30729.8978","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[{"status":"affected","version":"4.8.1","lessThan":"2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0","versionType":"custom"}],"platforms":["Windows 10 Version 21H2 for 32-bit Systems","Windows 10 Version 21H2 for ARM64-based Systems","Windows 10 Version 21H2 for x64-based Systems","Windows 10 Version 22H2 for 32-bit Systems","Windows 10 Version 22H2 for ARM64-based Systems","Windows 10 Version 22H2 for x64-based Systems","Windows 11 Version 23H2 for ARM64-based Systems","Windows 11 Version 23H2 for x64-based Systems","Windows 11 Version 24H2 for ARM64-based Systems","Windows 11 Version 24H2 for x64-based Systems","Windows 11 Version 25H2 for ARM64-based Systems","Windows 11 Version 25H2 for x64-based Systems","Windows 11 Version 26H1 for ARM64-based Systems","Windows 11 version 26H1 for x64-based Systems","Windows Server 2022","Windows Server 2022 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[{"status":"affected","version":"4.7.0","lessThan":"4.7.4143.0","versionType":"custom"}],"platforms":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[{"status":"affected","version":"4.8.0","lessThan":"4.8.4803.0","versionType":"custom"}],"platforms":["Windows 10 Version 1607 for 32-bit Systems","Windows 10 Version 1607 for x64-based Systems","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.12","versions":[{"status":"affected","version":"17.12.0","lessThan":"17.12.22","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.14","versions":[{"status":"affected","version":"17.14.0","lessThan":"17.14.36","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2026 version 18.7","versions":[{"status":"affected","version":"18.0","lessThan":"18.7.4","versionType":"custom"}]}],"modified":"2026-10-08T18:12:45.566Z","provider":"cve","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-47302","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-07-14T20:34:26.536141Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-07-14T20:48:10.245Z"}}],"cna":{"orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft","dateUpdated":"2026-10-08T18:12:45.566Z"}}},"related_cves":[{"value":"CVE-2026-47302","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:8ad20b50-a062-4153-b622-0b5ea26bfee4","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-47302","advisory_id":"8ad20b50-a062-4153-b622-0b5ea26bfee4","event_types":["advisory"],"published_at":"2026-10-25T00:19:09.539106+00:00","technologies":["core-cve","microsoft-net-framework-3-5","microsoft-net-framework-3-5-and-4-7-2","microsoft-net-framework-3-5-and-4-8","microsoft-net-framework-3-5-and-4-8-1","microsoft-net-framework-4-6-2-4-7-4-7-1-4-7-2","microsoft-net-framework-4-8","microsoft-visual-studio-2022-version-17-12","microsoft-visual-studio-2022-version-17-14","microsoft-visual-studio-2026-version-18-7","net-10-0","net-8-0","net-9-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-14T18:45:32.796+00:00","detail_url":"/events/13162"}]}}],"next_after":61633,"next_before":13231}