.NET and Visual Studio Denial of Service Vulnerability
Priority MEDIUM 43CWE-121Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub, Red Hat and Microsoft. Impact type from Microsoft.
Summary
Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01895 79th percentileScored 2026-11-07
Fix Fixed System.Security.Cryptography.Xml (NuGet): 10.0.6, 9.0.15, 8.0.3Red Hat: 17 advisoriesMicrosoft: 3 updates
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Microsoft | .NET 10.0 | 10.0.0 to before 10.0.6 | 10.0.6 | Patch available | CNA |
| Microsoft | .NET 8.0 | 8.0.0 to before 8.0.26 | 8.0.26 | Patch available | CNA |
| Microsoft | .NET 9.0 | 9.0.0 to before 9.0.15 | 9.0.15 | Patch available | CNA |
| Microsoft | Microsoft Visual Studio 2022 version 17.12 | 17.12.0 to before 17.12.19 | 17.12.19 | Patch available | CNA |
| Microsoft | Microsoft Visual Studio 2022 version 17.14 | 17.14.0 to before 17.14.30 | 17.14.30 | Patch available | CNA |
| Microsoft | Microsoft Visual Studio 2026 version 18.4 | 18.4.0 to before 18.4.4 | 18.4.4 | Patch available | CNA |
| — | System.Security.Cryptography.Xml (NuGet) | 10.0.0 to before 10.0.6 | 10.0.6 | Patch available | GHSA-6588-8gv4-xfgh |
| — | System.Security.Cryptography.Xml (NuGet) | 9.0.0 to before 9.0.15 | 9.0.15 | Patch available | GHSA-6588-8gv4-xfgh |
| — | System.Security.Cryptography.Xml (NuGet) | 8.0.0 to before 8.0.3 | 8.0.3 | Patch available | GHSA-6588-8gv4-xfgh |
- .NET 10.0 VendorMicrosoft Affected 10.0.0 to before 10.0.6 Fixed in 10.0.6 Patch available CNA
- .NET 8.0 VendorMicrosoft Affected 8.0.0 to before 8.0.26 Fixed in 8.0.26 Patch available CNA
- .NET 9.0 VendorMicrosoft Affected 9.0.0 to before 9.0.15 Fixed in 9.0.15 Patch available CNA
- Microsoft Visual Studio 2022 version 17.12 VendorMicrosoft Affected 17.12.0 to before 17.12.19 Fixed in 17.12.19 Patch available CNA
- Microsoft Visual Studio 2022 version 17.14 VendorMicrosoft Affected 17.14.0 to before 17.14.30 Fixed in 17.14.30 Patch available CNA
- Microsoft Visual Studio 2026 version 18.4 VendorMicrosoft Affected 18.4.0 to before 18.4.4 Fixed in 18.4.4 Patch available CNA
- System.Security.Cryptography.Xml (NuGet) Vendor— Affected 10.0.0 to before 10.0.6 Fixed in 10.0.6 Patch available GHSA-6588-8gv4-xfgh
- System.Security.Cryptography.Xml (NuGet) Vendor— Affected 9.0.0 to before 9.0.15 Fixed in 9.0.15 Patch available GHSA-6588-8gv4-xfgh
- System.Security.Cryptography.Xml (NuGet) Vendor— Affected 8.0.0 to before 8.0.3 Fixed in 8.0.3 Patch available GHSA-6588-8gv4-xfgh
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* | 10.0.0 to before 10.0.6 | Vulnerable | Microsoft |
| cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Apple |
| cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Linux |
| cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* | 8.0.0 to before 8.0.26; 9.0.0 to before 9.0.15 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* | 17.12.0 to before 17.12.19 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:* | 17.14.0 to before 17.14.30 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:* | 18.4.0 to before 18.4.4 | Vulnerable | Microsoft |
- cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* Versions 10.0.0 to before 10.0.6 Vulnerable ·Microsoft
- cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Apple
- cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux
- cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* Versions 8.0.0 to before 8.0.26; 9.0.0 to before 9.0.15 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* Versions 17.12.0 to before 17.12.19 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:* Versions 17.14.0 to before 17.14.30 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:* Versions 18.4.0 to before 18.4.4 Vulnerable ·Microsoft
Remediation
- Fix · GHSA-6588-8gv4-xfgh System.Security.Cryptography.Xml (NuGet) Fixed in 10.0.6 Advisory →
- Fix · GHSA-6588-8gv4-xfgh System.Security.Cryptography.Xml (NuGet) Fixed in 9.0.15 Advisory →
- Fix · GHSA-6588-8gv4-xfgh System.Security.Cryptography.Xml (NuGet) Fixed in 8.0.3 Advisory →
Red Hat 17 advisories
- RHSA-2026:13693 Released 2026-05-05 · Red Hat rating Important.NET 8.0 security update
- Red Hat CodeReady Linux Builder EUS (v.9.4) dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) aspnetcore-runtime-8.0-8.0.26-1.el9_4, aspnetcore-runtime-dbg-8.0-8.0.26-1.el9_4, aspnetcore-targeting-pack-8.0-8.0.26-1.el9_4 +11
- RHSA-2026:13282 Released 2026-05-04 · Red Hat rating Important.NET 9.0 security update
- Red Hat CodeReady Linux Builder EUS (v.9.6) dotnet-sdk-9.0-source-built-artifacts-9.0.116-1.el9_6
- Red Hat Enterprise Linux AppStream EUS (v.9.6) aspnetcore-runtime-9.0-9.0.15-1.el9_6, aspnetcore-runtime-dbg-9.0-9.0.15-1.el9_6, aspnetcore-targeting-pack-9.0-9.0.15-1.el9_6 +12
- RHSA-2026:13283 Released 2026-05-04 · Red Hat rating Important.NET 8.0 security update
- Red Hat CodeReady Linux Builder EUS (v.9.6) dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el9_6
- Red Hat Enterprise Linux AppStream EUS (v.9.6) aspnetcore-runtime-8.0-8.0.26-1.el9_6, aspnetcore-runtime-dbg-8.0-8.0.26-1.el9_6, aspnetcore-targeting-pack-8.0-8.0.26-1.el9_6 +9
Show 14 more Red Hat advisories
- RHSA-2026:13280 Released 2026-05-04 · Red Hat rating Important.NET 9.0 security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) aspnetcore-runtime-9.0-9.0.15-1.el10_0, aspnetcore-runtime-dbg-9.0-9.0.15-1.el10_0, aspnetcore-targeting-pack-9.0-9.0.15-1.el10_0 +12
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) dotnet-sdk-9.0-source-built-artifacts-9.0.116-1.el10_0
- RHSA-2026:13281 Released 2026-05-04 · Red Hat rating Important.NET 8.0 security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) aspnetcore-runtime-8.0-8.0.26-1.el10_0, aspnetcore-runtime-dbg-8.0-8.0.26-1.el10_0, aspnetcore-targeting-pack-8.0-8.0.26-1.el10_0 +9
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el10_0
- RHSA-2026:9205 Released 2026-04-21 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images dotnet9.0-9.0.116-1.hum1@src
- RHSA-2026:9080 Released 2026-04-20 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images dotnet8.0-8.0.126-1.hum1@src
- RHSA-2026:9077 Released 2026-04-20 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images dotnet10.0-10.0.106-1.hum1@src
- RHSA-2026:8474 Released 2026-04-16 · Red Hat rating Important.NET 9.0 security update
- Red Hat Enterprise Linux AppStream (v. 9) aspnetcore-runtime-9.0-9.0.15-1.el9_7, aspnetcore-runtime-dbg-9.0-9.0.15-1.el9_7, aspnetcore-targeting-pack-9.0-9.0.15-1.el9_7 +11
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) dotnet-sdk-9.0-source-built-artifacts-9.0.116-1.el9_7
- RHSA-2026:8471 Released 2026-04-16 · Red Hat rating Important.NET 10.0 security update
- Red Hat Enterprise Linux AppStream (v. 9) aspnetcore-runtime-10.0-10.0.6-1.el9_7, aspnetcore-runtime-dbg-10.0-10.0.6-1.el9_7, aspnetcore-targeting-pack-10.0-10.0.6-1.el9_7 +11
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) dotnet-sdk-10.0-source-built-artifacts-10.0.106-1.el9_7
- RHSA-2026:8473 Released 2026-04-16 · Red Hat rating Important.NET 10.0 security update
- Red Hat Enterprise Linux AppStream (v. 8) aspnetcore-runtime-10.0-10.0.6-1.el8_10, aspnetcore-runtime-dbg-10.0-10.0.6-1.el8_10, aspnetcore-targeting-pack-10.0-10.0.6-1.el8_10 +12
- Red Hat Enterprise Linux CRB (v. 8) dotnet-sdk-10.0-source-built-artifacts-10.0.106-1.el8_10
- RHSA-2026:8475 Released 2026-04-16 · Red Hat rating Important.NET 9.0 security update
- Red Hat Enterprise Linux AppStream (v. 8) aspnetcore-runtime-9.0-9.0.15-1.el8_10, aspnetcore-runtime-dbg-9.0-9.0.15-1.el8_10, aspnetcore-targeting-pack-9.0-9.0.15-1.el8_10 +11
- Red Hat Enterprise Linux CRB (v. 8) dotnet-sdk-9.0-source-built-artifacts-9.0.116-1.el8_10
- RHSA-2026:8469 Released 2026-04-16 · Red Hat rating Important.NET 8.0 security update
- Red Hat Enterprise Linux AppStream (v. 9) aspnetcore-runtime-8.0-8.0.26-1.el9_7, aspnetcore-runtime-dbg-8.0-8.0.26-1.el9_7, aspnetcore-targeting-pack-8.0-8.0.26-1.el9_7 +9
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el9_7
- RHSA-2026:8468 Released 2026-04-16 · Red Hat rating Important.NET 8.0 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream (v. 8) aspnetcore-runtime-8.0-8.0.26-1.el8_10, aspnetcore-runtime-dbg-8.0-8.0.26-1.el8_10, aspnetcore-targeting-pack-8.0-8.0.26-1.el8_10 +9
- Red Hat Enterprise Linux CRB (v. 8) dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el8_10
- RHSA-2026:8467 Released 2026-04-16 · Red Hat rating Important.NET 10.0 security update
- Red Hat Enterprise Linux AppStream (v. 10) aspnetcore-runtime-10.0-10.0.6-1.el10_1, aspnetcore-runtime-dbg-10.0-10.0.6-1.el10_1, aspnetcore-targeting-pack-10.0-10.0.6-1.el10_1 +11
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) dotnet-sdk-10.0-source-built-artifacts-10.0.106-1.el10_1
- RHSA-2026:8472 Released 2026-04-16 · Red Hat rating Important.NET 9.0 security update
- Red Hat Enterprise Linux AppStream (v. 10) aspnetcore-runtime-9.0-9.0.15-1.el10_1, aspnetcore-runtime-dbg-9.0-9.0.15-1.el10_1, aspnetcore-targeting-pack-9.0-9.0.15-1.el10_1 +11
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) dotnet-sdk-9.0-source-built-artifacts-9.0.116-1.el10_1
- RHSA-2026:8470 Released 2026-04-16 · Red Hat rating Important.NET 8.0 security update
- Red Hat Enterprise Linux AppStream (v. 10) aspnetcore-runtime-8.0-8.0.26-1.el10_1, aspnetcore-runtime-dbg-8.0-8.0.26-1.el10_1, aspnetcore-targeting-pack-8.0-8.0.26-1.el10_1 +9
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el10_1
Microsoft 3 updates
- Security Update
- .NET 9.0 installed on Linux 9.0.15
- .NET 9.0 installed on Mac OS 9.0.15
- .NET 9.0 installed on Windows 9.0.15
- Security Update
- .NET 8.0 8.0.26
- .NET 8.0 installed on Linux 8.0.26
- .NET 8.0 installed on Mac OS 8.0.26
- .NET 8.0 installed on Windows 8.0.26
- Security Update
- .NET 10.0 installed on Linux 10.0.6
- .NET 10.0 installed on Mac OS 10.0.6
- .NET 10.0 installed on Windows 10.0.6
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat CodeReady Linux Builder EUS (v.9.4) | Fixed | RHSA-2026:13693 |
| Red Hat CodeReady Linux Builder EUS (v.9.6) | Fixed | RHSA-2026:13282, RHSA-2026:13283 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:8467, RHSA-2026:8470, RHSA-2026:8472 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2026:8468, RHSA-2026:8473, RHSA-2026:8475 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:8469, RHSA-2026:8471, RHSA-2026:8474 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:13280, RHSA-2026:13281 |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Fixed | RHSA-2026:13693 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:13282, RHSA-2026:13283 |
| Red Hat Enterprise Linux CRB (v. 8) | Fixed | RHSA-2026:8468, RHSA-2026:8473, RHSA-2026:8475 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2026:8467, RHSA-2026:8470, RHSA-2026:8472 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | Fixed | RHSA-2026:8469, RHSA-2026:8471, RHSA-2026:8474 |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Fixed | RHSA-2026:13280, RHSA-2026:13281 |
| Red Hat Hardened Images | Fixed | RHSA-2026:9077, RHSA-2026:9080, RHSA-2026:9205 |
Not affected: 1 product
- Red Hat Hardened Images
Microsoft
Microsoft's page for this CVE →
- Impact
- Denial of Service
- Exploited
- No
- Publicly disclosed
- No
- Exploitability
- Exploitation Less Likely
| Product | Status | Plan or fix |
|---|---|---|
| Microsoft Visual Studio 2022 version 17.12 | Fixed | 17.12.19 · Security Update |
| Microsoft Visual Studio 2022 version 17.14 | Fixed | 17.14.30 · Security Update |
| Microsoft Visual Studio 2026 version 18.4 | Fixed | 18.4.4 · Security Update |
Timeline
- 2026-10-02 Threatist record created from CVE-2026-32203
- 2026-10-03 Alias added: GHSA-6588-8gv4-xfgh
References
Other 24
- https://github.com/dotnet/runtime/security/advisories/GHSA-6588-8gv4-xfgh
- https://github.com/dotnet/runtime/issues/126891
- https://github.com/dotnet/announcements/issues/391
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32203.json
- https://github.com/dotnet/runtime
- https://bugzilla.redhat.com/show_bug.cgi?id=2457740
- https://access.redhat.com/security/cve/CVE-2026-32203
- https://access.redhat.com/errata/RHSA-2026:9205
- https://access.redhat.com/errata/RHSA-2026:9080
- https://access.redhat.com/errata/RHSA-2026:9077
- https://access.redhat.com/errata/RHSA-2026:8475
- https://access.redhat.com/errata/RHSA-2026:8474
- https://access.redhat.com/errata/RHSA-2026:8473
- https://access.redhat.com/errata/RHSA-2026:8472
- https://access.redhat.com/errata/RHSA-2026:8471
- https://access.redhat.com/errata/RHSA-2026:8470
- https://access.redhat.com/errata/RHSA-2026:8469
- https://access.redhat.com/errata/RHSA-2026:8468
- https://access.redhat.com/errata/RHSA-2026:8467
- https://access.redhat.com/errata/RHSA-2026:13693
- https://access.redhat.com/errata/RHSA-2026:13283
- https://access.redhat.com/errata/RHSA-2026:13282
- https://access.redhat.com/errata/RHSA-2026:13281
- https://access.redhat.com/errata/RHSA-2026:13280
More Microsoft .net vulnerabilities
- TI-2026-79288 Out-of-bounds write in Google Brotli decoder KEVCVSS 4.0CRITICAL 9.2
- TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
- TI-2023-19596 .NET and Visual Studio Denial of Service Vulnerability KEVCVSS 3.1HIGH 7.5
- TI-2023-19588 Microsoft QUIC Denial of Service Vulnerability CVSS 3.1HIGH 7.5
- TI-2024-14152 .NET and Visual Studio Denial of Service Vulnerability CVSS 3.1HIGH 7.5
- TI-2021-08380 .NET Core Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-32203 · CVE Program
- CVE-2026-32203 · NVD
- FIRST EPSS
- GHSA-6588-8gv4-xfgh · GitHub Advisory Database · CC BY 4.0
- CVE-2026-32203 · Microsoft Security Update Guide
- CVE-2026-32203 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences