CVE-2026-33116 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

...

CVE-2026-33116

CVE-2026-33116 affects the System.Security.Cryptography.Xml component in .NET projects. The issue is described as an infinite loop in EncryptedXml that enables a Denial of Service when exploited over a network. Affected packages and patched versions are documented across .NET releases: .NET 10: S...

CVE-2026-32226

CVE-2026-32226 is a .NET Framework Denial of Service vulnerability. It is exploitable remotely over a network with high attack complexity, no user interaction, and requires no privileges, causing a high availability impact (CVSS v3.1 base score 5.9). An official fix is available. The referenced s...

CVE-2026-32178

CVE-2026-32178 affects .NET’s System.Net.Mail parsing and enables spoofing over the network. Connected advisories confirm impact across .NET 8/9/10 and list fixed versions: .NET 8.0.26, 9.0.15, and 10.0.6 (SDKs/Runtimes). Mitigation is to upgrade affected runtimes/SDKs to these patched versions o...

.NET Framework Denial of Service Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in .NET Framework allows an unauthorized attacker to deny service over a network...

April 14, 2026-Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 (KB5082398)

None None...

April 14, 2026-KB5082418 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2

None None...

April 14, 2026-Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 (KB5082403)

None None...

April 14, 2026-Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 R2 (KB5082406)

None None...

April 14, 2026-Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 R2 (KB5082402)

None None...

April 14, 2026-Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 (KB5082400)

None None...

April 14, 2026-KB5082413 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10, version 1809 and Windows Server 2019

None None...

April 14, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5084069)

None None...

CVE-2026-33116: Loop with Unreachable Exit Condition

Loop with unreachable exit condition 'infinite loop' in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network...

CVE-2026-32226: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in .NET Framework allows an unauthorized attacker to deny service over a network...

CVE-2026-23666: Improper Handling of Exceptional Conditions

Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network...

April 14, 2026-KB5084165 Cumulative Update for .NET Framework 3.5 for Windows 11, version 26H1 (build 28000) and later

None None...

April 14, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5084070)

None None...

BIT-DOTNET-SDK-2026-26131 .NET Elevation of Privilege Vulnerability

Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-32880

Name of the Vulnerable Software and Affected Versions System.Security.Cryptography.Xml versions 10.0.0 through 10.0.5 System.Security.Cryptography.Xml versions 9.0.0 through 9.0.14 System.Security.Cryptography.Xml versions 8.0.0 through 8.0.2 .NET affected versions not specified .NET Framework...