IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.5Hoch

CVE-2026-33116.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Microsoft .NET 10.0; Microsoft .NET 8.0; Microsoft .NET 9.0; Microsoft Microsoft .NET Framework 3.5 Veröffentlicht: (vor 7 Monaten)

Beschreibung

Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

Schwachstellentyp (CWE): CWE-835CWE-400CWE-20CWE-776

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Microsoft Microsoft .NET Framework 3.5 3.5.0 – < 2.0.50727.8982 & 3.0.30729.8976
Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 4.7.0 – < 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0
Microsoft Microsoft .NET Framework 3.5 AND 4.8 4.8.0 – < 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0
Microsoft Microsoft .NET Framework 3.5 AND 4.8.1 4.8.1 – < 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0
Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.0 – < 4.8.4801.0
Microsoft Microsoft .NET Framework 4.8 4.8.0 – < 4.8.4801.0
microsoft .net 10.0.0 – < 10.0.6
Microsoft .NET 10.0 10.0.0 – < 10.0.6
Microsoft .NET 8.0 8.0 – < 8.0.26
Microsoft .NET 9.0 9.0.0 – < 9.0.15
microsoft .net framework 3.5
Red Hat Red Hat Enterprise Linux 10 all versions
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support all versions
Red Hat Red Hat Enterprise Linux 8 all versions
Red Hat Red Hat Enterprise Linux 9 all versions
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support all versions
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support all versions
Red Hat Red Hat Hardened Images all versions

Referenzen und Patches

CPE-Treffer (NVD) (15)
  • cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* ≥ 10.0.0 < 10.0.6
  • cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* ≥ 8.0.0 < 8.0.26
  • cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* ≥ 9.0.0 < 9.0.15
  • cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*

Neue CVEs im selben Produkt — .NET

5.3Mittel
CVE-2026-120796

.NET Denial of Service Vulnerability

Microsoft .NET 11.0 installed on Linux; Microsoft .NET 11.0 installed on Mac OS; Microsoft .NET 11.0 installed on Windows; Microsoft System.Text.Json

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

1.2%EPSS
7.5Hoch
CVE-2026-118749

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 11.0 installed on Linux; Microsoft .NET 11.0 installed on Mac OS; Microsoft .NET 11.0 installed on Windows; Microsoft Microsoft Visual Studio 2026 version 18.12

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

1.1%EPSS
7.5Hoch
CVE-2026-118748

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 11.0 installed on Linux; Microsoft .NET 11.0 installed on Mac OS; Microsoft .NET 11.0 installed on Windows; Microsoft Microsoft Visual Studio 2026 version 18.12

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

1.1%EPSS
8.8Hoch
CVE-2026-118745

Visual Studio Remote Code Execution Vulnerability

Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Windows; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Windows

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

8.8Hoch
CVE-2026-114159

Visual Studio Remote Code Execution Vulnerability

Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Windows; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Windows

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.