Skip to main content
← All vulnerabilities
CVE-2026-26127GHSA-73J8-2GCH-69RQBIT-DOTNET-2026-26127BIT-DOTNET-SDK-2026-26127

.NET Denial of Service Vulnerability

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 10.0.4, 9.0.14
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • Microsoft .NET 10.0

    From 10.0.0 · fixed in 10.0.4

  • Microsoft .NET 9.0

    From 9.0.0 · fixed in 9.0.14

  • Microsoft Microsoft.Bcl.Memory

    From 10.0.0 · fixed in 10.0.4

  • Microsoft Microsoft.Bcl.Memory

    From 9.0.0 · fixed in 9.0.14

  • Microsoft.Bcl.MemoryNuGet

    From 9.0.0 · fixed in 9.0.14

  • Microsoft.NetCore.App.Runtime.linux-armNuGet

    From 9.0.0 · fixed in 9.0.14

  • Microsoft.NetCore.App.Runtime.linux-arm64NuGet

    From 9.0.0 · fixed in 9.0.14

  • Microsoft.NetCore.App.Runtime.linux-musl-armNuGet

    From 9.0.0 · fixed in 9.0.14

  • Microsoft.NetCore.App.Runtime.linux-musl-arm64NuGet

    From 9.0.0 · fixed in 9.0.14

  • Microsoft.NetCore.App.Runtime.linux-musl-x64NuGet

    From 9.0.0 · fixed in 9.0.14

  • Microsoft.NetCore.App.Runtime.linux-x64NuGet

    From 9.0.0 · fixed in 9.0.14

  • Microsoft.NetCore.App.Runtime.osx-arm64NuGet

    From 9.0.0 · fixed in 9.0.14

  • Microsoft.NetCore.App.Runtime.osx-x64NuGet

    From 9.0.0 · fixed in 9.0.14

  • Microsoft.NetCore.App.Runtime.win-armNuGet

    From 9.0.0 · fixed in 9.0.14

  • Microsoft.NetCore.App.Runtime.win-arm64NuGet

    From 9.0.0 · fixed in 9.0.14

  • Microsoft.NetCore.App.Runtime.win-x64NuGet

    From 9.0.0 · fixed in 9.0.14

  • Microsoft.NetCore.App.Runtime.win-x86NuGet

    From 9.0.0 · fixed in 9.0.14

  • Microsoft.Bcl.MemoryNuGet

    From 10.0.0 · fixed in 10.0.4

  • Microsoft.NetCore.App.Runtime.linux-armNuGet

    From 10.0.0 · fixed in 10.0.4

  • Microsoft.NetCore.App.Runtime.linux-arm64NuGet

    From 10.0.0 · fixed in 10.0.4

  • Microsoft.NetCore.App.Runtime.linux-musl-armNuGet

    From 10.0.0 · fixed in 10.0.4

  • Microsoft.NetCore.App.Runtime.linux-musl-arm64NuGet

    From 10.0.0 · fixed in 10.0.4

  • Microsoft.NetCore.App.Runtime.linux-musl-x64NuGet

    From 10.0.0 · fixed in 10.0.4

  • Microsoft.NetCore.App.Runtime.linux-x64NuGet

    From 10.0.0 · fixed in 10.0.4

  • Microsoft.NetCore.App.Runtime.osx-arm64NuGet

    From 10.0.0 · fixed in 10.0.4

  • Microsoft.NetCore.App.Runtime.osx-x64NuGet

    From 10.0.0 · fixed in 10.0.4

  • Microsoft.NetCore.App.Runtime.win-armNuGet

    From 10.0.0 · fixed in 10.0.4

  • Microsoft.NetCore.App.Runtime.win-x64NuGet

    From 10.0.0 · fixed in 10.0.4

  • Microsoft.NetCore.App.Runtime.win-x86NuGet

    From 10.0.0 · fixed in 10.0.4

  • Microsoft.NetCore.App.Runtime.win-arm64NuGet

    From 10.0.0 · fixed in 10.0.4

References 1

msrc.microsoft.com