GHSA-VMV3-WVJP-WQPJ Microsoft Security Advisory CVE-2026-118747 - .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory provides guidance on updating affected applications and components. Colliding CBOR map keys can hash-flood uniqueness checks; the fix uses seeded Marvin hashing...

Microsoft Security Advisory CVE-2026-118747 - .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory provides guidance on updating affected applications and components. Colliding CBOR map keys can hash-flood uniqueness checks; the fix uses seeded Marvin hashing...

CVE-2026-118747: Microsoft System.Formats.Cbor: Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-143809

Name of the Vulnerable Software and Affected Versions System.Formats.Cbor versions 8.0.0-0 through 8.0.1 System.Formats.Cbor versions 9.0.0-0 through 9.0.23 System.Formats.Cbor versions 10.0.0-0 through 10.0.14 System.Formats.Cbor versions prior to 11.0.0 Description Inefficient algorithmic...