CVE-2026-45591

🗓️ 09 Jun 2026 17:05:29Reported by microsoftType

Uncontrolled resource consumption in ASP.NET Core enables denial of service by an attacker.

Reporter	Title	Published	Views	Family All 8
Cvelist	CVE-2026-45591 ASP.NET Core Denial of Service Vulnerability	9 Jun 202617:05	–	cvelist
EUVD	EUVD-2026-35549	9 Jun 202617:05	–	euvd
Microsoft KB	.NET 10.0 Update - June 9, 2026	9 Jun 202614:00	–	mskb
Microsoft KB	.NET 8.0 Update - June 9, 2026	9 Jun 202614:00	–	mskb
Microsoft KB	.NET 9.0 Update - June 9, 2026	9 Jun 202614:00	–	mskb
NCSC	vulnerabilities handled in Microsoft Developer Tools	9 Jun 202618:23	–	ncsc
NVD	CVE-2026-45591	9 Jun 202617:17	–	nvd
Positive Technologies	PT-2026-47980	9 Jun 202600:00	–	ptsecurity

Vulners

CNA

Node

microsoft .net_frameworkRange10.0.0–10.0.9

Node

microsoft .net_frameworkRange8.0.0–8.0.28

Node

microsoft .net_frameworkRange9.0.0–9.0.17

Node

microsoft asp.net_coreRange10.0–10.0.9

Node

microsoft asp.net_coreRange8.0–8.0.28

Node

microsoft asp.net_coreRange9.0–9.0.17

Node

microsoft visual_studio_2026Range18.6.0–18.6.3

[
  {
    "vendor": "Microsoft",
    "product": ".NET 10.0",
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "10.0.9",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": ".NET 8.0",
    "versions": [
      {
        "version": "8.0.0",
        "lessThan": "8.0.28",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": ".NET 9.0",
    "versions": [
      {
        "version": "9.0.0",
        "lessThan": "9.0.17",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "ASP.NET Core 10.0",
    "versions": [
      {
        "version": "10.0",
        "lessThan": "10.0.9",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "ASP.NET Core 8.0",
    "versions": [
      {
        "version": "8.0",
        "lessThan": "8.0.28",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "ASP.NET Core 9.0",
    "versions": [
      {
        "version": "9.0",
        "lessThan": "9.0.17",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2026 version 18.6",
    "versions": [
      {
        "version": "18.6.0",
        "lessThan": "18.6.3",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591

09 Jun 2026 21:50Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.17.5

CWE-400