CVE-2026-26171

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-23666

CVE-2026-23666 is described in connected sources as a race condition Denial of Service flaw in the .NET Framework caused by concurrent access to a shared resource. Public writeups (Qualys blog and NCSC) confirm a DoS impact over the network, without detailing specific affected versions. The initi...

CVE-2026-33116

CVE-2026-33116 affects the System.Security.Cryptography.Xml component in .NET projects. The issue is described as an infinite loop in EncryptedXml that enables a Denial of Service when exploited over a network. Affected packages and patched versions are documented across .NET releases: .NET 10: S...

CVE-2026-33116 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

...

CVE-2026-32226

CVE-2026-32226 is a .NET Framework Denial of Service vulnerability. It is exploitable remotely over a network with high attack complexity, no user interaction, and requires no privileges, causing a high availability impact (CVSS v3.1 base score 5.9). An official fix is available. The referenced s...

CVE-2026-32178

CVE-2026-32178 affects .NET’s System.Net.Mail parsing and enables spoofing over the network. Connected advisories confirm impact across .NET 8/9/10 and list fixed versions: .NET 8.0.26, 9.0.15, and 10.0.6 (SDKs/Runtimes). Mitigation is to upgrade affected runtimes/SDKs to these patched versions o...

April 14, 2026-Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 R2 (KB5082402)

April 14, 2026-Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 R2 KB5082402 Applies to: Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework 4.7.2 Important The installation of this...

April 14, 2026-Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 (KB5082400)

April 14, 2026-Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 KB5082400 Applies to: Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework 4.7.2 Important The installation of this Extende...

April 14, 2026-Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 (KB5082403)

April 14, 2026-Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 KB5082403 Applies to: Microsoft .NET Framework 4.8 Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows...

April 14, 2026-Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 (KB5082398)

April 14, 2026-Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 KB5082398 Applies to: Microsoft .NET Framework 3.5 Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows...

April 14, 2026-KB5082413 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10, version 1809 and Windows Server 2019

April 14, 2026-KB5082413 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10, version 1809 and Windows Server 2019 Release Date: April 14, 2026 Version: .NET Framework 3.5 and 4.7.2 The April 14, 2026 update for Windows 10, version 1809 and Windows Server 2019 includes security and...

April 14, 2026-Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 R2 (KB5082406)

April 14, 2026-Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 R2 KB5082406 Applies to: Microsoft .NET Framework 3.5 Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running...

April 14, 2026-KB5082418 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2

April 14, 2026-KB5082418 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2 Release Date: April 14, 2026 Version: .NET Framework 3.5 and 4.8.1 The April 14, 2026 update for Microsoft server operating system, version 23H2 includes security and...

.NET Framework Denial of Service Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in .NET Framework allows an unauthorized attacker to deny service over a network...

April 14, 2026-KB5084165 Cumulative Update for .NET Framework 3.5 for Windows 11, version 26H1 (build 28000) and later

April 14, 2026-KB5084165 Cumulative Update for .NET Framework 3.5 for Windows 11, version 26H1 build 28000 and later Revised May 13, 2026: Updated 'How to get this update' section. Release Date: April 14, 2026 Version: .NET Framework 3.5 The April 14, 2026 update installs the complete .NET...

April 14, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5084070)

April 14, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 KB5084070 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework 4.7.2...

April 14, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5084069)

April 14, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB5084069 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework 4.7.2...

BIT-DOTNET-SDK-2026-26131 .NET Elevation of Privilege Vulnerability

Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-32880

Name of the Vulnerable Software and Affected Versions System.Security.Cryptography.Xml versions 10.0.0 through 10.0.5 System.Security.Cryptography.Xml versions 9.0.0 through 9.0.14 System.Security.Cryptography.Xml versions 8.0.0 through 8.0.2 .NET affected versions not specified .NET Framework...

.NET 8.0 security update

An update is available for dotnet8.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...