Skip to main content
← All vulnerabilities
CVE-2026-50524GHSA-W7CW-XP7H-6J5JBIT-DOTNET-2026-50524BIT-DOTNET-SDK-2026-50524

.NET Framework Denial of Service Vulnerability

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 10.0.10, 8.0.29, 9.0.18, 17.12.22, 17.14.36, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • Microsoft .NET 10.0 runtime

    From 10.0.0 · fixed in 10.0.10

  • Microsoft .NET 8.0 runtime

    From 8.0.0 · fixed in 8.0.29

  • Microsoft .NET 9.0 runtime

    From 9.0.0 · fixed in 9.0.18

  • Microsoft Microsoft Visual Studio 2022 version 17.12

    From 17.12.0 · fixed in 17.12.22

  • Microsoft Microsoft Visual Studio 2022 version 17.14

    From 17.14.0 · fixed in 17.14.36

  • Microsoft Microsoft Visual Studio 2026 version 18.7

    From 18.0 · fixed in 18.7.4

  • Microsoft.NetCore.App.Runtime.linux-armNuGet

    From 10.0.0 · fixed in 10.0.10

  • Microsoft.NetCore.App.Runtime.linux-arm64NuGet

    From 10.0.0 · fixed in 10.0.10

  • Microsoft.NetCore.App.Runtime.linux-musl-armNuGet

    From 10.0.0 · fixed in 10.0.10

  • Microsoft.NetCore.App.Runtime.linux-musl-arm64NuGet

    From 10.0.0 · fixed in 10.0.10

  • Microsoft.NetCore.App.Runtime.linux-musl-x64NuGet

    From 10.0.0 · fixed in 10.0.10

  • Microsoft.NetCore.App.Runtime.linux-x64NuGet

    From 10.0.0 · fixed in 10.0.10

  • Microsoft.NetCore.App.Runtime.osx-arm64NuGet

    From 10.0.0 · fixed in 10.0.10

  • Microsoft.NetCore.App.Runtime.osx-x64NuGet

    From 10.0.0 · fixed in 10.0.10

  • Microsoft.NetCore.App.Runtime.win-armNuGet

    From 10.0.0 · fixed in 10.0.10

  • Microsoft.NetCore.App.Runtime.win-arm64NuGet

    From 10.0.0 · fixed in 10.0.10

  • Microsoft.NetCore.App.Runtime.win-x64NuGet

    From 10.0.0 · fixed in 10.0.10

  • Microsoft.NetCore.App.Runtime.win-x86NuGet

    From 10.0.0 · fixed in 10.0.10

  • Microsoft.NetCore.App.Runtime.linux-armNuGet

    From 9.0.0 · fixed in 9.0.18

  • Microsoft.NetCore.App.Runtime.linux-arm64NuGet

    From 9.0.0 · fixed in 9.0.18

  • Microsoft.NetCore.App.Runtime.linux-musl-armNuGet

    From 9.0.0 · fixed in 9.0.18

  • Microsoft.NetCore.App.Runtime.linux-musl-arm64NuGet

    From 9.0.0 · fixed in 9.0.18

  • Microsoft.NetCore.App.Runtime.linux-musl-x64NuGet

    From 9.0.0 · fixed in 9.0.18

  • Microsoft.NetCore.App.Runtime.linux-x64NuGet

    From 9.0.0 · fixed in 9.0.18

  • Microsoft.NetCore.App.Runtime.osx-arm64NuGet

    From 9.0.0 · fixed in 9.0.18

  • Microsoft.NetCore.App.Runtime.osx-x64NuGet

    From 9.0.0 · fixed in 9.0.18

  • Microsoft.NetCore.App.Runtime.win-armNuGet

    From 9.0.0 · fixed in 9.0.18

  • Microsoft.NetCore.App.Runtime.win-arm64NuGet

    From 9.0.0 · fixed in 9.0.18

  • Microsoft.NetCore.App.Runtime.win-x64NuGet

    From 9.0.0 · fixed in 9.0.18

  • Microsoft.NetCore.App.Runtime.win-x86NuGet

    From 9.0.0 · fixed in 9.0.18

  • Microsoft.NetCore.App.Runtime.linux-armNuGet

    From 8.0.0 · fixed in 8.0.29

  • Microsoft.NetCore.App.Runtime.linux-arm64NuGet

    From 8.0.0 · fixed in 8.0.29

  • Microsoft.NetCore.App.Runtime.linux-musl-armNuGet

    From 8.0.0 · fixed in 8.0.29

  • Microsoft.NetCore.App.Runtime.linux-musl-arm64NuGet

    From 8.0.0 · fixed in 8.0.29

  • Microsoft.NetCore.App.Runtime.linux-musl-x64NuGet

    From 8.0.0 · fixed in 8.0.29

  • Microsoft.NetCore.App.Runtime.linux-x64NuGet

    From 8.0.0 · fixed in 8.0.29

  • Microsoft.NetCore.App.Runtime.osx-arm64NuGet

    From 8.0.0 · fixed in 8.0.29

  • Microsoft.NetCore.App.Runtime.osx-x64NuGet

    From 8.0.0 · fixed in 8.0.29

  • Microsoft.NetCore.App.Runtime.win-armNuGet

    From 8.0.0 · fixed in 8.0.29

  • Microsoft.NetCore.App.Runtime.win-arm64NuGet

    From 8.0.0 · fixed in 8.0.29

  • Microsoft.NetCore.App.Runtime.win-x64NuGet

    From 8.0.0 · fixed in 8.0.29

  • Microsoft.NetCore.App.Runtime.win-x86NuGet

    From 8.0.0 · fixed in 8.0.29

References 1

msrc.microsoft.com